Privacy policy

Effective 18 September 2026. Last updated 2 November 2026. Emailyst is made by Odibert Eid, trading as Odibert.

The short version

Your mail never leaves your Mac. Emailyst reads it from Apple Mail's database on your computer, judges it with the language model built into macOS, and moves messages inside your own mail account. No message, subject, sender, address or account name is ever sent to me or to anyone else. The app has no server that handles mail.

What the app does send, exactly

• Activating a licence key sends the key and a hashed device identifier (a SHA-256 hash of your Mac's hardware ID - not the ID itself) to my licence server at api.odibert.com, which returns a signed licence. About once a day the app asks the server whether the licence is still valid, sending the same two things plus the licence's own reference number, which the server issued.
• A daily check-in, on by default and switchable off in Settings: the same hashed device identifier, whether the copy is free or paid, the app and macOS versions, the date the app was first opened, and two totals - scans run and messages filed. It also says how far setting up has got: the date and time each first step was done (accepting the licence agreement, granting Full Disk Access, Mail's accounts being found, the first sort, the first move, switching on automatic sorting), how many Mail accounts were found, whether Apple Intelligence is available on the Mac and whether notifications were allowed. A step done for the first time is reported straight away rather than at the next daily check-in. This is how I know how many copies exist and whether people keep using it. Nothing about your mail is included.
• The free allowance, from a free copy only, at launch and after each scan: the same hashed device identifier and, for each mail account it has sorted, a per-account identifier and a number - how many of the free 1,000 have been used. The per-account identifier is a SHA-256 hash of the account address combined with the device identifier; the address cannot be recovered from it, and the server never sees it. This is what keeps the free allowance at 1,000 across reinstalls. It cannot be switched off, because it is the allowance. A paid copy never sends it.
• Checking for updates fetches a small file from odibert.com describing the latest version. It carries no identifier.
• Crash reports are never sent automatically. If the app crashed, it offers to open an email to me containing the crash log; you read it and choose whether to send.
• Report a Problem / Suggest an Idea open an email in your mail app, pre-filled with the app version, macOS version, Mac model and licence tier. You send it or you don't.

Gmail

To move mail out of a Gmail inbox rather than only label it, Emailyst can connect to Google. If you allow it, Google issues the app a token that is stored in your Mac's Keychain and used only from your Mac to move the messages you chose. The token never goes to my server. You can disconnect at any time in Settings → Accounts, and revoke the app's access at myaccount.google.com/permissions. Emailyst's use of Google data is limited to moving mail at your request and complies with the Google API Services User Data Policy, including the Limited Use requirements.

Sync between your Macs

If you switch on sync, the app writes what it has already sorted, your rules and your scan history to a folder in your own iCloud Drive, so your other Macs can read it. That data travels through Apple's iCloud under your Apple account; it does not pass through any server of mine.

Buying

Payments are handled by Lemon Squeezy or PayPal; I do not see or store card details. I receive your email address and the transaction reference so a licence key can be issued and, if needed, refunded. The licence email is sent through Resend from hello@odibert.com. I keep, per key: the email it was issued to, when, which Macs (as hashed device identifiers) have activated it, and its payment reference - for as long as the licence exists, so that support and refunds work. For each Mac using a licence I also keep, under its hashed device identifier, when it was activated and last confirmed, a hash of the key (not the key), and the free-copy totals described above as they stood when it was activated - how long the app had been installed, and how much of it had been used. These are not tied to your name or address, and are how I see whether the free version leads to buying.

The website

odibert.com uses GoatCounter for visit counts: pages, referrers, country and browser type. It sets no cookies and stores nothing that identifies you. Buttons on the site count clicks the same way.

The server also notes each arrival at the home page and the Emailyst page, other than from elsewhere on odibert.com: the name of the site that linked here, if any (for example google.com - never the full address), any tag on the link (such as ?ref=), the country, the kind of device (Mac, iPhone, Windows...) and the date and time to the minute. No IP address, no cookies and no browser details are kept, and these notes are deleted after a year.

Pressing Download is noted with the date and time to the minute and the kind of device it came from (Mac, iPhone, Windows...), and on a Mac it adds one to the download count; these notes are deleted after about 13 months. So the same person isn't counted twice in a day, a hash of the IP address and the date is kept for 24 hours and then deleted; the IP address itself is never stored.

What I never do

• Read, store or transmit the contents of your mail.
• Sell or share any data with anyone. There is no advertising and no data business.
• Delete mail. The app only moves messages, and every move can be reversed.

Your rights

You can ask me what I hold about you (it is the key record described above), have it corrected, or have it deleted - which also ends the licence. Email support@odibert.com. Switching off the daily check-in stops that data being sent; records already held are kept only as long as they are useful for counting copies and are not tied to a name.

Changes

If this policy changes, the date at the top changes with it, and any change that widens what is collected will be announced in the app's update notes first.

Contact

support@odibert.com