Privacy policy

Effective 15 October 2026

posture is an app that runs on your own computer. It has no server, and we never receive your email, your account details or anything about how you use it.

What posture accesses

When you connect a Google account, posture asks Google for the gmail.modify permission. The current version uses it only to read: your messages, threads, labels and your account's email address. It does not send, delete, label or change anything in your mailbox. The wider permission is requested so that a later version, which will act on mail only after you approve each action, does not need you to sign in again. We will update this policy before any version does so.

Where your data goes

• Mail travels directly between Google and your computer over an encrypted connection.
• posture stores a copy of your mail in a database on your computer that only your user account can read.
• You sign in on Google's own page, so posture never sees your password. The sign-in tokens Google issues, and your own Google client credentials if you choose to use them, are kept in your operating system's keychain.
• posture sends no data to us or to anyone else. It has no analytics, crash reporting or telemetry.
• The current version does not send your mail to any AI service. If a later version offers AI features, this policy will say which service is used and what is sent before that version is released.

Google user data

posture's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to show you your own mail in the app. It is not transferred to anyone, not used for advertising, and not read by people.

Keeping and deleting your data

Your mail stays on your computer until you remove it. posture account remove disconnects an account and deletes its cached mail and sign-in token from your computer; your Gmail is not affected. To delete everything, remove posture's data folder (~/.local/share/posture on Linux, ~/Library/Application Support/posture on macOS). You can also withdraw posture's access at any time at myaccount.google.com/permissions.

This website

posture.email uses no cookies, analytics or tracking. Like any website, it is delivered through hosting and network providers (Cloudflare and Railway), which process standard request information such as IP addresses to deliver and protect the site.

Changes and contact

We will post any change to this policy on this page with a new effective date. Questions: hello@posture.email. posture is published by HydraCorp.