The shortest privacy policy we could honestly write.

Unlike Mail is operated by Adamanture Private Limited (“we”, “us”), the data controller for the personal data described here. Privacy questions, requests, and grievances: support@adamanture.com.

• Account identity — the email address you sign in with and the account identifier your provider (Google / Microsoft) gives us during OAuth. Used to run your account; nothing else.
• Billing metadata — your plan and payment state once you subscribe. Card details live with the payment processor, never on our servers.
• Operational logs — timestamps, status codes, and error traces, content-free, kept briefly to keep the service healthy and debuggable.

Our database also holds material that is opaque to us by construction: your wrapped keys, sealed provider tokens, and sealed message data. The keys that open them exist only on your devices. The full inventory — stored, never-stored, and transient — is published on the Compliance & Trust page, and the mechanism on the blueprint. A breach of our database is a breach of noise.

• Message plaintext of sealed mail — of any mail; the server processes your mailbox in RAM to render your inbox and keeps no content
• Your passphrase, keys, or anything derived from them
• Advertising profiles, tracking pixels, analytics resold to anyone
• Your contacts for any purpose beyond showing them to you

We make nothing from reading your mail. It’s promise #4 on the mission page, and the architecture enforces it better than any policy could.

Your mail lives at your provider — Google, Microsoft, Zoho, or whichever host answers your IMAP mailbox — exactly as before; Unlike Mail is a client, not a new mailbox. On the web, while you’re signed in, our server fetches and processes your mail in RAM to serve your session, then forgets it. The native apps talk to your provider directly, so your mail needn’t transit our servers at all. A mailbox connected over IMAP is stronger still: that connection is made only by the desktop app, and we never receive its host, port, credential, or contents at all. Sealed messages are encrypted on your device before any server — ours or your provider’s — sees them. Mail exchanged with people not on Unlike Mail is ordinary email, governed by your provider’s privacy policy, not ours.

The app sets a single HttpOnly session cookie so you stay signed in. No advertising cookies, no cross-site trackers, no fingerprinting, no third-party analytics scripts riding along. This marketing site is static and tracker-free too.

Delete your account and we delete your rows — identity, wraps, ciphertext — within 30 days, backups included on their rotation. Revoking our OAuth access at your provider cuts our mailbox access instantly, independent of us. Operational logs expire on a short fixed schedule. And because everything sensitive was ciphertext, deletion is belt-and-suspenders: the data was useless the whole time.

Wherever you are, we honor: access (a copy of what we hold about you — it’s short), correction, erasure, portability (your mail is already portable — it’s your mailbox), and objection. EU users: our lawful basis is contract performance (running the service you asked for). India: requests under the DPDP Act 2023 go to our grievance contact. All of it: support@adamanture.com, answered by a human, usually within days not months.

• Children: Unlike Mail isn’t directed at children under 13 (or the higher local minimum). We don’t knowingly hold their data; tell us if you believe we do.
• Changes: if this policy changes materially, we’ll email you before it takes effect and keep the old version available. No silent edits.
• Contact: support@adamanture.com — a human reads it.