In short
Outwright has no account with us, no analytics, no advertising and no tracking. Your mail, calendar and contacts go between your iPhone and your own server, and never pass through ours. The only service we run for the app is a push relay, which you may use or not; it wakes your phone when new mail arrives and sees nothing of your mail: no message, sender, recipient or address.
Who is responsible
Agiletto AB, Sweden, makes Outwright and is the controller of the little personal data described here. Write to [email protected] with any question about it.
The app
The app connects only to the servers you add to it, over encrypted connections. What it fetches (messages, events, contacts) is stored on your iPhone, and your passwords are stored only in the iPhone's keychain. Removing an account removes its mail and its password from the phone.
Pictures in a message are not fetched until you ask for them. When you do, the servers that host them see your IP address, as with any mail app.
The app sends us no usage data, crash data or diagnostics. If you choose to send us a problem report, it is an ordinary email that you read before you send it.
The push relay
The relay is used only if you turn on new-mail notifications. Then the app asks the relay for a push address and gives it to your mail server. When new mail arrives, your server sends an encrypted message to that address, and the relay asks Apple's push service to wake your phone. The app then fetches the mail from your server. The relay runs on our own server in the EU.
For that, the relay stores:
- an id for your device and its Apple push token,
- the public key Apple's App Attest made for the app on your device, so that only the real app can register,
- the ids of your push subscriptions, their state and when they were made, and
- while a new subscription waits to be confirmed, the latest encrypted message for it, which the relay cannot read.
It never stores or sees a sender, subject, message text, mail address or password. The push your phone receives carries none of them either; the app fetches the sender and subject from your server, on the phone, to show the notification. Server logs contain your IP address and which requests were made; they are used for operation, troubleshooting and to stop abuse.
A subscription is deleted when you turn notifications off for an account or remove the account. A device is deleted, with its subscriptions, when Apple reports that it no longer accepts notifications.
The alpha
When you sign up for the alpha on this site, we keep the address you give and, if you fill them in, your mail server and your iPhone and iOS version, with the time you signed up. They are stored on our own server in the EU and sent by email to our support inbox. We use them only to invite you and to know which servers to test.
The invitation goes through Apple's TestFlight, which gives us your name and email address, and the screenshots, crash reports and comments you choose to send through it. Apple's own handling of that data is described in Apple's privacy policy.
Ask us, and we remove you from the alpha and delete what you sent.
This site
This site sets no cookies. We measure visits with Plausible, run on our own server in the EU, which uses no cookies and does not track you across websites; it counts page views and alpha signups, not who made them. Server logs contain your IP address and which pages and requests you made; they are used for operation, troubleshooting and to stop abuse.
Your rights
You may ask what we hold about you, have it corrected or deleted, and object to how we use it; write to [email protected]. You may also complain to the Swedish Authority for Privacy Protection (IMY).
Alpha signups are kept until the alpha ends, or until you ask us to delete them. Server logs are kept only as long as needed for operation and security.
If this policy changes, the new version is published here with its date.