Northmail

Northmail by Binadit

Privacy policy

Your accounts connect directly to your mail providers. This policy explains what Northmail does with your data, including Google account data.

Last updated: .

Who we are

Northmail is an email application for computers, iPhone and iPad. Calendar, contacts and tasks features are available on desktop; mobile features depend on the release. Northmail is provided by Binadit B.V., Seinhuiswachter 2, 3034 KH Rotterdam, the Netherlands, Chamber of Commerce number 80923216. Contact contact@binadit.com for privacy questions or support@binadit.com for product support.

This product-specific policy supplements the Binadit privacy policy, which describes our company contact details, legal bases, service and correspondence records, and your data protection rights. This page describes the handling of data by Northmail specifically.

Data we access and why

You choose which accounts to connect. Northmail accesses the information needed to display and manage those accounts: account identifiers, email addresses, messages and attachments, folders or labels, calendars and events, contacts, and task lists and tasks. Supported functions depend on the provider.

For Gmail and Google Workspace, sign-in takes place on Google's website in your browser. Google asks you to authorize access. Northmail receives authorization tokens, not your Google password. The permissions support these features:

We use this data to provide the features you use in Northmail. We do not sell Google user data, use it for advertising, or use it to train generalized AI or machine learning models.

Where data is stored

Northmail keeps a local database and message and attachment cache on your device so you can work offline. Desktop synchronization windows and retention differ from mobile. On iPhone and iPad, downloads default to the latest 30 days with a 1 GiB removable cache budget, both adjustable in Settings. Eligible older local copies are pruned without deleting server mail. Drafts, pending operations and other protected content are retained and may prevent the cache from shrinking to its selected limit.

Credentials are stored in the operating system's credential vault. Google refresh tokens stay in the local vault and access tokens are held in memory. Northmail uses encrypted connections to supported provider services. Local data also relies on your device's access controls, operating-system data protection or disk encryption settings, and backups; the message cache is not a separate Northmail-encrypted vault.

Ordinary Google synchronization connects directly from your computer to Google. Binadit does not operate an intermediary service that receives your Google mailbox contents or Google authorization tokens for this synchronization. Google retains the server-side account data under its own policies.

Sharing and transfers you control

Sending a message shares its contents with the recipients and the mail services involved. Invitations and other calendar changes can notify participants through your calendar provider. Changes you make to provider data are synchronized back to that provider.

If you choose to copy or move messages to another connected account, Northmail sends the selected messages and attachments to that destination provider. This can be Binadit Workspace or another provider you select. The destination's privacy and retention rules then apply to that copy. These transfers are part of the user-directed mail client features; they do not happen merely because you connect a Google account.

On macOS, iPhone and iPad, optional iCloud configuration synchronization shares account metadata and supported preferences through your iCloud Drive. This is enabled by default when available unless you turn it off in Settings. Shared metadata includes account email addresses, display names and provider settings. For supported password-based accounts, credentials may also synchronize through iCloud Keychain. Google authorization tokens are not shared through iCloud; each device needs its own supported Google sign-in. Native Google sign-in is not available in the first iPhone/iPad beta. Email, calendar, contact and task content is not included in Northmail's iCloud configuration files.

Turning off configuration synchronization stops new Northmail exchanges on that device. Previously shared files or credentials may remain in iCloud and may already have reached other devices. Account removals are shared while configuration synchronization is enabled.

Optional local AI

The mobile application does not include local AI. If you enable and use Northmail's desktop local AI features, the selected content is processed on your computer. Northmail does not send that content to a cloud AI service and does not use your Google data to train a general-purpose model. Downloading a model requires a network connection to its download host, but does not upload your mailbox. AI output is sent to a provider or recipient only when you use a feature that saves or sends it.

Downloads, updates and support

iPhone and iPad app updates are delivered by Apple through TestFlight or the App Store. Northmail mobile does not include an advertising or analytics SDK. Apple processes TestFlight feedback and diagnostics under its own terms and privacy information.

Website visits, desktop update checks, application downloads and model downloads contact the relevant hosting service, which can receive ordinary request information such as your IP address and requested file. These requests do not include your Google mailbox contents or authorization tokens.

Binadit staff do not have automatic access to your Google mailbox through Northmail. If you contact support, we process the information you choose to provide under the Binadit privacy policy. Do not send passwords, authorization tokens or private messages that are not needed to explain your issue.

Retention, removal and revoking access

Connected account data remains in the local store while the account is configured. Removing an account from Northmail removes its local account data and local sign-in credentials through the app's cleanup process. It does not delete the provider account or the server's messages, contacts, events or tasks. Copies exported or transferred elsewhere, backups and previously synchronized configuration files have their own retention and must be managed separately.

You can revoke Northmail's authorization in your Google Account's third-party connections settings. Revocation prevents further authorized Google access but does not itself erase data already cached on a computer. Remove the account from Northmail on the relevant computers as well if you want to remove those local copies.

You can request access, correction, deletion, restriction, portability or object to our processing by emailing contact@binadit.com. The Binadit privacy policy explains these rights and how to contact the Dutch data protection authority. For data held by Google or another provider, use that provider's account controls or contact it directly.

Binadit Workspace accounts

If you connect a Binadit Workspace account, Binadit is also your chosen mail service provider. Messages, addresses, account identifiers and other synchronized provider data are stored and processed by that service to deliver mail and your selected features, including authentication, security and service operation. This is separate from third-party mailbox connections, which do not pass through a Binadit mailbox proxy. The Binadit company privacy policy and your Workspace service arrangements apply.

Google API Limited Use

Our use and transfer of Google API data follows the Google API Services User Data Policy, including its Limited Use requirements.

Changes to this policy

We publish changes on this page and update the date above. A material change to how Northmail uses Google data requires appropriate notice and, where required, your consent before the new use begins.