For more information on permissions, see [this FAQ](https://m66b.github.io/FairEmail/#faq1).
For more information on permissions, see [this FAQ](https://github.com/M66B/FairEmail/blob/master/FAQ.md#faq1).
FairEmail **does** use modern and secure transport protocols by default.
@ -60,7 +60,7 @@ FairEmail **does** follow the recommendations of [this EFF article](https://www.
FairEmail is 100 % **open source**, see [the license](https://github.com/M66B/FairEmail/blob/master/LICENSE).
Error reporting via Bugsnag **is opt-in**, see [here](https://m66b.github.io/FairEmail/#faq104) for more information.
Error reporting via Bugsnag **is opt-in**, see [here](https://github.com/M66B/FairEmail/blob/master/FAQ.md#faq104) for more information.
FairEmail **adheres** to the [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy),
including the [Limited Use requirements](https://developers.google.com/terms/api-services-user-data-policy#additional_requirements_for_specific_api_scopes).
@ -258,13 +258,13 @@ The sub-processors are:
#### V. Permissions
The app only requests permissions that are necessary for the expected behavior of an email app.
For more information on permissions, see [this FAQ](https://m66b.github.io/FairEmail/#faq1).
For more information on permissions, see [this FAQ](https://github.com/M66B/FairEmail/blob/master/FAQ.md#faq1).
#### VI. Logging
The app does not send any log entries to the data processor by default.
The error reporting system utilizes Bugsnag and is disabled by default.
See [this FAQ](https://m66b.github.io/FairEmail/#faq104) for more information.
See [this FAQ](https://github.com/M66B/FairEmail/blob/master/FAQ.md#faq104) for more information.
* ~~[AppGallery](https://wap3.hispace.hicloud.com/uowap/index.jsp#/detailApp/C101678151) (the AppGallery app can be downloaded [here](https://huaweimobileservices.com/appgallery/))~~
* ~~[Amazon](https://www.amazon.com/gp/product/B0983R6MH2)~~ (the APK file repackaged by Amazon is incomplete! An issue report was never answered by Amazon.)
Please see [this FAQ](https://m66b.github.io/FairEmail/#faq173) about the differences between the different releases.
Please see [this FAQ](https://github.com/M66B/FairEmail/blob/master/FAQ.md#faq173) about the differences between the different releases.
**Important**: Only the versions in the Play Store and GitHub are official releases. Support for other releases from alternative app stores, etc. is limited.
**Important**: after enrolling in the [Advanced Protection Program](https://landing.google.com/advancedprotection/)
you cannot use third party email apps anymore, please see [this FAQ](https://m66b.github.io/FairEmail/#faq22) for more information.
you cannot use third party email apps anymore, please see [this FAQ](https://github.com/M66B/FairEmail/blob/master/FAQ.md#faq22) for more information.
To download a GitHub release you might need to expand the assets section to download the [APK file](https://en.wikipedia.org/wiki/Android_application_package).
@ -140,11 +140,11 @@ F-Droid builds new versions irregularly and you'll need the F-Droid client to ge
To get updates in a timely fashion you are advised to use the GitHub release.
**Important**: There is support on the F-Droid build only if the version number of the F-Droid build is the same as the version number of the latest GitHub release.
Please [see here](https://m66b.github.io/FairEmail/#faq147) for more information on third-party builds.
Please [see here](https://github.com/M66B/FairEmail/blob/master/FAQ.md#faq147) for more information on third-party builds.
Because F-Droid builds and GitHub releases are signed differently, an F-Droid build needs to be uninstalled first to be able to update to a GitHub release.
The best way to verify the integrity of an APK file is documented [here](https://m66b.github.io/FairEmail/#faq205).
The best way to verify the integrity of an APK file is documented [here](https://github.com/M66B/FairEmail/blob/master/FAQ.md#faq205).
Certificate fingerprints:
@ -179,7 +179,7 @@ because earlier Android versions do not support notification channels.
FairEmail will work properly on devices without any Google service installed.
Please see [here](https://m66b.github.io/FairEmail/#known-problems) for known problems.
Please see [here](https://github.com/M66B/FairEmail/blob/master/FAQ.md#known-problems) for known problems.
## Privacy
@ -187,7 +187,7 @@ Please see [here](https://github.com/M66B/FairEmail/blob/master/PRIVACY.md#faire
## Support
Please see [here](https://m66b.github.io/FairEmail/) for a list of often asked questions and about how to get support.
Please see [here](https://github.com/M66B/FairEmail/blob/master/FAQ.md) for a list of often asked questions and about how to get support.
<p><sup>Provided by <ahref="https://www.faircode.eu/">FairCode B.V.</a></sup></p>
<p><sup>Provided by <ahref="https://www.faircode.eu/">FairCode
B.V.</a></sup></p>
<h2id="privacy-policy">Privacy policy</h2>
<p><ahref="https://translate.google.com/translate?hl=&sl=en&u=https%3A%2F%2Fraw.githubusercontent.com%2FM66B%2FFairEmail%2Fmaster%2FPRIVACY.md">🌎 Google Translate</a></p>
<p>This privacy policy will be updated as needed, such as when there are changes in the app or when regulations or laws change.</p>
<p>This privacy policy will be updated as needed, such as when there are
changes in the app or when regulations or laws change.</p>
<p>Last update: <strong>June 2, 2024</strong></p>
<p><br/></p>
<p>First of all, FairEmail’s main goal is to help you protect your privacy. What follows is a complete overview of all the data that will be stored on the device and that <strong>can be</strong> sent to the internet. The latter is in the end always your choice and therefore optional.</p>
<p>Except for error reports (disabled by default), the app does not send any data to the developer. Error reports will automatically be deleted after one month, or earlier upon request.</p>
<p>Data collected on the device will <strong>never</strong> be sold or shared in any way.</p>
<p>Data collected on the device will <strong>never</strong> be used for profiling, (AI) training or advertisements.</p>
<p>First of all, FairEmail’s main goal is to help you protect your
privacy. What follows is a complete overview of all the data that will
be stored on the device and that <strong>can be</strong> sent to the
internet. The latter is in the end always your choice and therefore
optional.</p>
<p>Except for error reports (disabled by default), the app does not send
any data to the developer. Error reports will automatically be deleted
after one month, or earlier upon request.</p>
<p>Data collected on the device will <strong>never</strong> be sold or
shared in any way.</p>
<p>Data collected on the device will <strong>never</strong> be used for
profiling, (AI) training or advertisements.</p>
<p>There are <strong>no ads</strong> in the app.</p>
<p>You have the right to lodge a complaint with a supervisory data protection authority, please <ahref="https://en.wikipedia.org/wiki/National_data_protection_authority">see here</a> for a list.</p>
<p>You have the right to lodge a complaint with a supervisory data
<p>The <ahref="https://play.google.com/store/apps/datasafety?id=eu.faircode.email">data safety</a> in the Play Store says:</p>
<p>“<em>The developer says this app doesn’t share user data with other companies or organizations.</em>”.</p>
<p>Unfortunately, there is no way to say that the app doesn’t share data with the developer. Except for error reporting (explicitly opt-in) <strong>no data will be shared with the developer</strong>. It is important to note that collecting data on the device isn’t synonymous with sending data off the device!</p>
<p>“<em>The developer says this app doesn’t share user data with other
companies or organizations.</em>”.</p>
<p>Unfortunately, there is no way to say that the app doesn’t share data
with the developer. Except for error reporting (explicitly opt-in)
<strong>no data will be shared with the developer</strong>. It is
important to note that collecting data on the device isn’t synonymous
with sending data off the device!</p>
<p><br/></p>
<h3id="overview">Overview</h3>
<p>FairEmail <strong>does not</strong> send account information and message data elsewhere than to your email provider.</p>
<p>FairEmail <strong>does not</strong> allow other apps access to message data without your approval.</p>
<p>FairEmail <strong>does not</strong> require unnecessary permissions. For more information on permissions, see <ahref="https://m66b.github.io/FairEmail/#faq1">this FAQ</a>.</p>
<p>FairEmail <strong>does</strong> use modern and secure transport protocols by default.</p>
<p>Android <ahref="https://source.android.com/docs/security/features/encryption">encrypts all user data by default</a>, so all data, including account credentials, is stored encrypted by default.</p>
<p>FairEmail <strong>does</strong> follow the recommendations of <ahref="https://www.eff.org/deeplinks/2019/01/stop-tracking-my-emails">this EFF article</a>.</p>
<p>FairEmail is 100 % <strong>open source</strong>, see <ahref="https://github.com/M66B/FairEmail/blob/master/LICENSE">the license</a>.</p>
<p>Error reporting via Bugsnag <strong>is opt-in</strong>, see <ahref="https://m66b.github.io/FairEmail/#faq104">here</a> for more information.</p>
<p>FairEmail <strong>adheres</strong> to the <ahref="https://developers.google.com/terms/api-services-user-data-policy">Google API Services User Data Policy</a>, including the <ahref="https://developers.google.com/terms/api-services-user-data-policy#additional_requirements_for_specific_api_scopes">Limited Use requirements</a>. Google API Services are used only to authenticate Gmail accounts through OAuth.</p>
<p>The use of information received from Gmail APIs will adhere to the Google User Data Policy, including the Limited Use requirements."</p>
<p>All stored information (account details, messages, etc.) is <strong>protected by encryption</strong>. All information is sent and received through <strong>secure connections</strong>. Of course, you should also protect your device by using a PIN code, pattern and/or biometric authentication.</p>
<p>FairEmail <strong>can use</strong> these services if they are explicitly enabled (off by default) or are explicitly used by you:</p>
<p>FairEmail <strong>does not</strong> send account information and
message data elsewhere than to your email provider.</p>
<p>FairEmail <strong>does not</strong> allow other apps access to
<li><ahref="https://developer.android.com/identity/data/backup">Google data backup</a>–<ahref="https://policies.google.com/privacy">Privacy policy</a></li>
<li><ahref="https://developer.android.com/distribute/play-billing">Google Play Billing</a>–<ahref="https://wallet.google.com/files/privacy.html">Privacy policy</a></li>
<p>FairEmail <strong>can access</strong> the websites at the domain names of email addresses (username@domain.name) if <ahref="https://en.wikipedia.org/wiki/Brand_Indicators_for_Message_Identification">Brand Indicators for Message Identification</a> (BIMI) or <ahref="https://en.wikipedia.org/wiki/Favicon">favicons</a> were explicitly enabled (off by default).</p>
<p>FairEmail <strong>will access</strong> the website at the link address if you tap the <em>Fetch title</em> button in the insert link dialog (from version 1.1905).</p>
<p>FairEmail obviously <strong>will access</strong> the configured email servers.</p>
<p>By default, personal data as mentioned above will be stored on your device for 30 days.</p>
<p>Under the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Virginia Consumer Data Protection Act (VCDPA), Lei Geral de Proteção de Dados (LGPD), and other regulations, you have the right to know whether your personal data is stored, shared or sold to third parties, used for (targeted) advertising, profiling (for decision making), etc., and you have the right to access, rectify and delete personal data. Data stored on the device, see above for details, will never be shared, sold, used for advertising, profiling, etc. You can access and change this data through the app. You can delete this data, and you can opt-out of storing this data by uninstalling the app. To exercise your rights, or if you have questions about data retention, etc., you can contact the developer, see for contact information below.</p>
<p>By default, personal data as mentioned above will be stored on your
device for 30 days.</p>
<p>Under the General Data Protection Regulation (GDPR), the California
Consumer Privacy Act (CCPA), the Virginia Consumer Data Protection Act
(VCDPA), Lei Geral de Proteção de Dados (LGPD), and other regulations,
you have the right to know whether your personal data is stored, shared
or sold to third parties, used for (targeted) advertising, profiling
(for decision making), etc., and you have the right to access, rectify
and delete personal data. Data stored on the device, see above for
details, will never be shared, sold, used for advertising, profiling,
etc. You can access and change this data through the app. You can delete
this data, and you can opt-out of storing this data by uninstalling the
app. To exercise your rights, or if you have questions about data
retention, etc., you can contact the developer, see for contact
information below.</p>
<p><br/></p>
<h3id="summary-of-shared-data">Summary of shared data</h3>
<p>This table provides a complete overview of all shared data and the conditions under which data will be shared:</p>
<p>This table provides a complete overview of all shared data and the
<td>Upon configuring and using an account or identity and upon sending messages</td>
<td>Upon configuring and using an account or identity and upon sending
messages</td>
</tr>
<trclass="odd">
<td>ipinfo.io</td>
<td>IP (network) address of domain names of links or email addresses</td>
<td>IP (network) address of domain names of links or email
addresses</td>
<td>Upon pressing a button in the link confirmation dialog</td>
</tr>
<trclass="even">
<td>Spamhaus</td>
<td>IP (network) address of domain names of links or email addresses</td>
<td>IP (network) address of domain names of links or email
addresses</td>
<td>If spam blocklists are enabled, upon receiving a message</td>
</tr>
<trclass="odd">
<td>Spamcop</td>
<td>IP (network) address of domain names of links or email addresses</td>
<td>IP (network) address of domain names of links or email
addresses</td>
<td>If spam blocklists are enabled, upon receiving a message</td>
</tr>
<trclass="even">
<td>Barracuda</td>
<td>IP (network) address of domain names of links or email addresses</td>
<td>IP (network) address of domain names of links or email
addresses</td>
<td>If spam blocklists are enabled, upon receiving a message</td>
</tr>
<trclass="odd">
@ -191,17 +453,20 @@
<trclass="even">
<td>LanguageTool</td>
<td>Entered message texts</td>
<td>If LanguageTools is enabled, upon long pressing the save draft button</td>
<td>If LanguageTools is enabled, upon long pressing the save draft
button</td>
</tr>
<trclass="odd">
<td>VirusTotal</td>
<td><ahref="https://en.wikipedia.org/wiki/SHA-2">SHA-256 hash</a> of attachments</td>
<td><ahref="https://en.wikipedia.org/wiki/SHA-2">SHA-256 hash</a> of
attachments</td>
<td>If VirusTotal is enabled, upon long pressing a scan button (*)</td>
</tr>
<trclass="even">
<td>VirusTotal</td>
<td>Attached file contents</td>
<td>If VirusTotal is enabled, upon long pressing an upload button (*)</td>
<td>If VirusTotal is enabled, upon long pressing an upload button
(*)</td>
</tr>
<trclass="odd">
<td>OpenAI/ChatGPT</td>
@ -215,12 +480,14 @@
</tr>
<trclass="odd">
<td>Gravatar</td>
<td><ahref="https://en.wikipedia.org/wiki/MD5">MD5 hash</a> of email addresses</td>
<td><ahref="https://en.wikipedia.org/wiki/MD5">MD5 hash</a> of email
addresses</td>
<td>If Gravatars are enabled, upon receiving a message (*)</td>
</tr>
<trclass="even">
<td>Libravatar</td>
<td><ahref="https://en.wikipedia.org/wiki/MD5">MD5 hash</a> of email addresses</td>
<td><ahref="https://en.wikipedia.org/wiki/MD5">MD5 hash</a> of email
addresses</td>
<td>If Libravatars are enabled, upon receiving a message (*)</td>
</tr>
<trclass="odd">
@ -261,36 +528,61 @@
<trclass="even">
<td>Bugsnag</td>
<td>Information about warnings and errors</td>
<td>If error reporting is enabled, upon detecting an abnormal situation</td>
<td>If error reporting is enabled, upon detecting an abnormal
situation</td>
</tr>
<trclass="odd">
<td>Android data backup</td>
<td>Account configuration, selected settings</td>
<td>If Android’s data backup is enabled on the miscellaneous settings tab page</td>
<td>If Android’s data backup is enabled on the miscellaneous settings
tab page</td>
</tr>
<trclass="even">
<td>Google Play Billing</td>
<td>“insight into API usage and service connection issues”</td>
<td>Not disclosed by Google (**) (endpoint: firebaselogging.googleapis.com)</td>
<td>Not disclosed by Google (**) (endpoint:
firebaselogging.googleapis.com)</td>
</tr>
</tbody>
</table>
</div>
<p>(*) Only available in the GitHub version of the app</p>
<p>(**) Only available in the Play Store version of the app</p>
<p>All data is sent to improve the user experience in some way, like to simplify account setup, identify spam and malicious messages, display message and sender information, find bugs and errors, etc.</p>
<p>Note that any internet connection reveals your current <ahref="https://en.wikipedia.org/wiki/Network_address">network address</a>. Also, when downloading content, like images and files, the <ahref="https://en.wikipedia.org/wiki/User_agent">browser’s user agent string</a> will be sent. There is a privacy option to minimize the information being sent, but please be aware that this can result in problems in some cases.</p>
<p>Under the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Virginia Consumer Data Protection Act (VCDPA), Lei Geral de Proteção de Dados (LGPD), and other regulations, you have the right to know whether your personal data is stored, shared or sold to third parties, used for (targeted) advertising, profiling (for decision making), etc., and you have the right to access, rectify and delete personal data. To exercise these rights, or if you have questions about data retention, etc., you can contact the service providers listed above. You can opt-out of having your data stored, shared, sold, used for (targeted) advertising, profiling (for decision making), etc. by not using these optional services/functions.</p>
<p>All data is sent to improve the user experience in some way, like to
simplify account setup, identify spam and malicious messages, display
message and sender information, find bugs and errors, etc.</p>
<p>Note that any internet connection reveals your current <a
address</a>. Also, when downloading content, like images and files, the
<ahref="https://en.wikipedia.org/wiki/User_agent">browser’s user agent
string</a> will be sent. There is a privacy option to minimize the
information being sent, but please be aware that this can result in
problems in some cases.</p>
<p>Under the General Data Protection Regulation (GDPR), the California
Consumer Privacy Act (CCPA), the Virginia Consumer Data Protection Act
(VCDPA), Lei Geral de Proteção de Dados (LGPD), and other regulations,
you have the right to know whether your personal data is stored, shared
or sold to third parties, used for (targeted) advertising, profiling
(for decision making), etc., and you have the right to access, rectify
and delete personal data. To exercise these rights, or if you have
questions about data retention, etc., you can contact the service
providers listed above. You can opt-out of having your data stored,
shared, sold, used for (targeted) advertising, profiling (for decision
making), etc. by not using these optional services/functions.</p>
<p><br/></p>
<h3id="definitions-of-terms">Definitions of terms</h3>
<p>This section defines some terms and words. Knowing those terms will help you understand the following sections.</p>
<p>This section defines some terms and words. Knowing those terms will
help you understand the following sections.</p>
<ul>
<li><em>Data subject</em>– the user of the app</li>
<li><em>Personal data</em>– any data the data subject could be identified with</li>
<li><em>Data controller</em>– the person / entity providing the app</li>
<li><em>Personal data</em>– any data the data subject could be
identified with</li>
<li><em>Data controller</em>– the person / entity providing the
app</li>
<li><em>Data processor</em>– the person / entity providing the app</li>
<li><em>Sub-processor</em>– a third party processing data</li>
<li><em>Data protection officer</em>– the person responsible for any privacy related enquiries</li>
<li><em>Data protection officer</em>– the person responsible for any
privacy related enquiries</li>
</ul>
<p><br></p>
<h3id="contact-details">Contact details</h3>
@ -301,42 +593,86 @@ Van Doesburg-Erf 194
3315 RG Dordrecht
the Netherlands
marcel+privacy@faircode.eu</code></pre>
<p>FairCode BV is the data controller. Its data protection officer is Marcel Bokhorst, reachable via the aforementioned address. For any legal issues, the place of jurisdiction is Dordrecht, the Netherlands.</p>
<p>FairCode BV is the data controller. Its data protection officer is
Marcel Bokhorst, reachable via the aforementioned address. For any legal
issues, the place of jurisdiction is Dordrecht, the Netherlands.</p>
<p><br></p>
<h3id="a.-general-information-on-data-processing">A. General information on data processing</h3>
<h4id="i.-scope-of-personal-data-processing">I. Scope of personal data processing</h4>
<p>This privacy policy / data protection declaration applies to the Android app FairEmail.</p>
<p>The data processor only processes personal data insofar as absolutely required for providing a functioning email client as well as the explicitly requested services. Users’ personal data is usually only processed if required for fulfilling contractual or legal obligations or with the user’s consent.</p>
<h4id="ii-purpose-of-data-processing">II Purpose of data processing</h4>
<p>The purpose of any data processed is to provide you with the service requested. The app by default exclusively processes data that is necessary for the proper functioning of the app and its intended purpose of being an email client.</p>
<h4id="iii.-data-storage-and-data-deletion">III. Data storage and data deletion</h4>
<p>By default, all data (both personal and non-personal) remains on the data subject’s Android device for as long as not explicitly sent or shared by the data subject. The data stored on the data subject’s device can be deleted by the data subject at any time.</p>
<h3id="a.-general-information-on-data-processing">A. General
information on data processing</h3>
<h4id="i.-scope-of-personal-data-processing">I. Scope of personal data
processing</h4>
<p>This privacy policy / data protection declaration applies to the
Android app FairEmail.</p>
<p>The data processor only processes personal data insofar as absolutely
required for providing a functioning email client as well as the
explicitly requested services. Users’ personal data is usually only
processed if required for fulfilling contractual or legal obligations or
with the user’s consent.</p>
<h4id="ii-purpose-of-data-processing">II Purpose of data
processing</h4>
<p>The purpose of any data processed is to provide you with the service
requested. The app by default exclusively processes data that is
necessary for the proper functioning of the app and its intended purpose
of being an email client.</p>
<h4id="iii.-data-storage-and-data-deletion">III. Data storage and data
deletion</h4>
<p>By default, all data (both personal and non-personal) remains on the
data subject’s Android device for as long as not explicitly sent or
shared by the data subject. The data stored on the data subject’s device
can be deleted by the data subject at any time.</p>
<p>The services of all sub-processors are disabled by default. The data subject’s data is sent to and processed by sub-processors if and only if explicitly enabled or requested by the data subject.</p>
<p>The services of all sub-processors are disabled by default. The data
subject’s data is sent to and processed by sub-processors if and only if
explicitly enabled or requested by the data subject.</p>
<p>The app only requests permissions that are necessary for the expected behavior of an email app. For more information on permissions, see <ahref="https://m66b.github.io/FairEmail/#faq1">this FAQ</a>.</p>
<p>The app only requests permissions that are necessary for the expected
behavior of an email app. For more information on permissions, see <a
<p>The app does not send any log entries to the data processor by default. The error reporting system utilizes Bugsnag and is disabled by default. See <ahref="https://m66b.github.io/FairEmail/#faq104">this FAQ</a> for more information.</p>
<p>The app does not send any log entries to the data processor by
default. The error reporting system utilizes Bugsnag and is disabled by
<p>FairEmail is fully <ahref="https://gdpr.eu/">GDPR compliant</a>. The legal basis for any data processing is Art. 6 (1) a - c GDPR.</p>
<p>FairEmail is fully <ahref="https://gdpr.eu/">GDPR compliant</a>. The
legal basis for any data processing is Art. 6 (1) a - c GDPR.</p>
<p><br></p>
<h3id="b.-support-requests">B. Support requests</h3>
<h4id="i.-description-and-scope-of-data-processing">I. Description and scope of data processing</h4>
<p>The data subject may contact the data processor to request support through channels offered by the data processor. When the data subject contacts the data processor, any provided personal data is stored by the data controller.</p>
<h4id="ii.-purpose-of-data-processing">II. Purpose of data processing</h4>
<p>The personal data is exclusively processed for finding a specific solution to support queries whilst recording and/or processing them. It is essential in this respect for the data controller to be able to contact the person requesting support.</p>
<h4id="i.-description-and-scope-of-data-processing">I. Description and
scope of data processing</h4>
<p>The data subject may contact the data processor to request support
through channels offered by the data processor. When the data subject
contacts the data processor, any provided personal data is stored by the
data controller.</p>
<h4id="ii.-purpose-of-data-processing">II. Purpose of data
processing</h4>
<p>The personal data is exclusively processed for finding a specific
solution to support queries whilst recording and/or processing them. It
is essential in this respect for the data controller to be able to
<li>Amazon Web Services EMEA SARL, if support request sent via the
contact form –<ahref="https://aws.amazon.com/privacy/">Privacy
policy</a></li>
</ul>
<h4id="iv.-legal-basis">IV. Legal basis</h4>
<p>Any support requests are sent voluntarily by the data subject, including any personal data that might be attached. As such, the explicit consent as outlined in Art. 6 (1) a GDPR forms the legal basis for processing.</p>
<p>Any support requests are sent voluntarily by the data subject,
including any personal data that might be attached. As such, the
explicit consent as outlined in Art. 6 (1) a GDPR forms the legal basis
M66B
2 weeks ago