Privacy Policy

Last Modified: 16 Nov 2025​

coll (“we,” “us,” or “our”) is a third-party email client for iOS. This Privacy Policy explains how we collect, use, and protect personal information when you use the coll app. 

By using coll, you agree to the practices described below. 

We collect only the minimal data required to operate the app and deliver the features you request. If you choose to enable optional diagnostics (off by default), anonymized crash data may be collected solely to identify and resolve technical issues. 

1. Information We Collect

Information You Provide 

  • OAuth Login: When you connect your email account (e.g., Gmail, Outlook), we use secure OAuth 2.0 authentication to access your mailbox. We do not collect or store your password. 
  • Support Requests: If you contact us, we may collect your name, email address, and message. 
  • Diagnostics: If enabled (off by default), anonymized crash data may be collected (e.g., error type, device model, OS version, app version). It does not include personal identifiers or email content. You can disable this at any time. 

Information We Access 

  • Email Content: coll accesses your email via IMAP to display emails in the app. 
  • Folders and Metadata: We access mailbox folders and email metadata (e.g. unread status, sender address, subject preview) locally on your device. 

Information We Store on Our Servers 

We store limited information to support core app features. This is metadata only and does not include the content of your emails. 

  • Account Info:
 Connected provider, email address, display name, labels, create time, and last sync time. 
  • Email Metadata:
 Draft IDs, last edited time. 
  • Signatures:
 Saved signature content, last edited time, and last-used signature ID per account. 
  • Contact Preferences:
 Email addresses and related settings like contact folder, muted, trusted. 
2. How We Use Your Information

We use only the metadata described above to support features like draft sync, contact preferences. 

  • Draft and signature sync 
  • Contact preferences 
  • Session continuity 

Some features, like Automatically Move New Contact, use on-device AI. While the AI runs on your device, the chosen folder is saved as contact metadata to support future organization. 

We do not use your data for usage tracking, analytics, advertising, or marketing. We do not sell, rent, or share your data with third parties. 

3. Sharing and Disclosure

We do not share your data with third parties except: 

  • With your explicit consent 
  • If required by law, subpoena, or court order 
  • To protect the rights, property, or safety of coll, its users, or the public 
4. Third-Party Services

To provide and maintain our app services, coll uses trusted third-party providers. We use Supabase as our backend service provider to securely store and manage your account information and app metadata. 

Supabase processes your data under strict confidentiality and security measures. For more information, please see Supabase’s Privacy Policy at https://supabase.com/privacy. 

5. Your Rights

If you’re in Canada (PIPEDA): You may request access to personal information we store (e.g., muted contacts), and request corrections or deletion. 

If you’re in the EU (GDPR): You may access, correct, delete, or download a copy of your data, object to certain uses, or withdraw consent at any time. 

If you’re in California (CCPA/CPRA): You may request details on what personal information we collect and how we use it, or request deletion.

To exercise any of these rights, email us at support@collmail.com from the primary email address linked to your coll ID, or use the options available in the app. 

6. Data Security

We use industry-standard protections, all sensitive data stored on servers is encrypted at rest: 

  • TLS encryption for all mail communications 
  • iOS Keychain for secure token storage 
  • Server-side encryption for metadata (e.g., contact preferences) 
  • Internal access restrictions
  • We do not log or store your IP address 
7. Data Storage and Retention

We do not store your email content. 

Metadata tied to your coll ID is retained until you delete your coll ID or remove it manually (e.g., by unmuting a contact). We do not impose automatic deletion periods. We do not retain any diagnostic or crash data once it has been reviewed for issue resolution. 

You may delete your coll ID at any time from within the app. This will permanently delete all associated data stored by coll, including account settings, preferences, and server-side metadata. 

Deleting the app will remove all local data from your device, but any server-stored metadata (such as contact preferences) will remain unless you explicitly delete your coll ID from within the app or contact us to request its deletion. 

8. Children’s Privacy

coll is not intended for users under age 13. We do not knowingly collect personal information from children. 

9. International Users

If you use coll outside Canada, your data may be processed in Canada or other countries. We ensure compliance with applicable local laws, such as the GDPR. 

10. Changes to This Policy

We may update this policy. If changes are significant, we will notify you in the app or via email. 

11. Contact Us

For questions or to exercise your rights, email us at support@collmail.com. 

12. App Store Privacy Disclosure

coll discloses the following in the App Store Privacy Nutrition Label: 

  • Data Linked to You: Contact info, email metadata,  
  • Data Not Linked to You: Diagnostics 
13. Definitions
  • Metadata: Information about your email such as draft ID, or sender — but not the actual message content. 
  • IMAP: A standard way email apps access your inbox. 

coll ©