Privacy Policy

Last Modified: 28 Jul 2026

coll (“we,” “us,” or “our”) is a third-party email client for iOS. This Privacy Policy explains how we collect, use, and protect personal information when you use the coll app.

By using coll, you agree to the practices described below.

We collect only the minimal data required to operate the app and deliver the features you request. If you choose to enable optional diagnostics (off by default), anonymized crash data may be collected solely to identify and resolve technical issues.

1. Information We Collect

Information You Provide

OAuth Login: When you connect your email account (e.g., Gmail, Outlook), we use secure OAuth 2.0 authentication to access your mailbox. We do not collect or store your password.
Support Requests: If you contact us, we may collect your name, email address, and message.
Diagnostics: If enabled (off by default), anonymized crash data may be collected (e.g., error type, device model, OS version, app version). It does not include personal identifiers or email content. You can disable this at any time.

Information We Access

Email Content: coll accesses your email via IMAP to display emails in the app.
Folders and Metadata: We access mailbox folders and email metadata (e.g. unread status, sender address, subject preview) locally on your device.

Information We Store on Our Servers

We store limited information to support core app features. This is metadata only and does not include the content of your emails.

Account Info: Connected provider, email address, display name, labels, create time, and last sync time.
Email Metadata: Draft IDs, last edited time.
Signatures: Saved signature content, last edited time, and last-used signature ID per account.
Contact Preferences: Email addresses and related settings like folder, muted, trusted.

2. How We Use Your Information

We use the information described above to support the following:

Draft and signature sync
Contact preferences
Session continuity
AI folder suggestions

AI folder suggestions use a short snippet of the contact's recent email content, processed entirely on-device. The model does not learn or improve from your data.

We do not use your data for usage tracking, analytics, advertising, or marketing. We do not sell, rent, or share your data with third parties.

3. Sharing and Disclosure

We do not share your data with third parties except:

With your explicit consent
If required by law, subpoena, or court order
To protect the rights, property, or safety of coll, its users, or the public

4. Third-Party Services

To provide and maintain our app services, coll uses trusted third-party providers. We use Supabase as our backend service provider to securely store and manage your account information and app metadata.

Supabase processes your data under strict confidentiality and security measures. For more information, please see Supabase’s Privacy Policy at https://supabase.com/privacy.

5. Your Rights

If you’re in Canada (PIPEDA): You may request access to personal information we store (e.g., muted contacts), and request corrections or deletion.

If you’re in the EU (GDPR): You may access, correct, delete, or download a copy of your data, object to certain uses, or withdraw consent at any time.

If you’re in California (CCPA/CPRA): You may request details on what personal information we collect and how we use it, or request deletion.

To exercise any of these rights, email us at support@collmail.com from the primary email address linked to your coll ID, or use the options available in the app.

6. Data Security

We use industry-standard protections, all sensitive data stored on servers is encrypted at rest:

TLS encryption for all mail communications
iOS Keychain for secure token storage
Server-side encryption for metadata (e.g., contact preferences)
Internal access restrictions
We do not log or store your IP address
On-device AI processing — no data leaves your device during folder matching

7. Data Storage and Retention

We do not store your email content.

Metadata tied to your coll ID is retained until you delete your coll ID or remove it manually (e.g., by unmuting a contact). We do not impose automatic deletion periods. We do not retain any diagnostic or crash data once it has been reviewed for issue resolution.

You may delete your coll ID at any time from within the app. This will permanently delete all associated data stored by coll, including account settings, preferences, and server-side metadata.

Deleting the app will remove all local data from your device, but any server-stored metadata (such as contact preferences) will remain unless you explicitly delete your coll ID from within the app or contact us to request its deletion.

8. Children’s Privacy

coll is not intended for users under age 13. We do not knowingly collect personal information from children.

9. International Users

If you use coll outside Canada, your data may be processed in Canada or other countries. We ensure compliance with applicable local laws, such as the GDPR.

10. Changes to This Policy

We may update this policy. If changes are significant, we will notify you in the app or via email.

11. Contact Us

For questions or to exercise your rights, email us at support@collmail.com.

12. App Store Privacy Disclosure

coll discloses the following in the App Store Privacy Nutrition Label:

Data Linked to You: Contact info, email metadata.
Data Not Linked to You: Diagnostics

13. Definitions

Metadata: Information about your email such as draft ID, or sender — but not the actual message content.
IMAP: A standard way email apps access your inbox.