Your mail stays yours.

Local attachment processing

When you enable the Mail extension and activate its compose checkmark, it processes the outgoing message and attachments locally on your Mac. We do not receive or store your messages, attachments, addresses, mail credentials or account details. Apple Mail sends your message through your existing account. The local setup check creates synthetic samples in memory and discards them after the check, including if it fails. It saves no sample files and sends no email.

Optional anonymous crash summaries

Sharing is off by default. If you enable it, the app sends a restricted technical summary to our diagnostics receiver over HTTPS after the crashed component next opens. The summary includes:

• App and build versions, macOS version and processor architecture.
• The component that crashed, crash signal, and code offsets with binary build UUIDs so we can find the failing code.
• A random identifier for that individual crash, never a persistent person or device identifier.

It excludes message text, attachments, filenames, email addresses, account names, local paths, device identifiers, register contents, exception messages and raw logs. We do not link summaries to a person, use them for advertising, or combine them with other datasets to identify users.

A temporary raw crash record remains locally until the crashed component next opens. It is then reduced to the allowed summary and removed. The app keeps at most ten queued summaries for up to seven days and retries while open. Received summaries expire after 30 days.

Cloudflare hosts the receiver and processes connection IP addresses for network transport and transient abuse limits. We do not store IP addresses, user agents or request metadata with crash reports, and receiver application logging is disabled. Data may be processed outside your country. Only the limited summary is stored for troubleshooting.

Turn sharing off in Help & feedback > Crash reports to stop uploads and clear the local queue. Quit and reopen the app and Mail to stop an already active local recorder. Already received anonymous reports cannot be linked back to your device for individual deletion; they expire automatically. Apple’s own analytics and crash-sharing settings are separate.

Support emails you choose to send

Bug reports and feature requests open an editable draft in Apple Mail. Nothing is sent without your action. If you send it, we receive your email address and whatever text, signature or files you include. Optional generated app details contain only app/build and macOS versions, processor type and local-check result. Please do not send private messages, attachments or raw crash logs.

We use support correspondence to answer you and improve the app. We retain it as needed to handle the request and related troubleshooting, then delete it when no longer needed, subject to any applicable legal obligations. You can email us to request access, correction or deletion of identifiable support correspondence. We do not sell personal information or use support messages for advertising.

Your choices

You can use every attachment feature without crash sharing or contacting support. There is no app account to create or delete, no advertising SDK and no cross-app tracking. Disabling the extension stops its message processing. Removing the app stops its operation; macOS may retain local preferences or cached records until the operating system or you remove them.

Our basis for optional crash processing is your choice to enable sharing; we use voluntary support details to respond to your request. Where applicable, you may also complain to your local privacy regulator.

Changes to this policy

We will update this page and its effective date if these practices change. A new optional collection practice will require an appropriate choice in the app.