Mail Cleanup privacy policy

Effective November 12, 2026. Mail Cleanup is an Android email cleanup app developed by Kevin DeMara / Eventide Studios. Contact: kevin.demara@gmail.com.

What the app accesses

After you connect Gmail or a personal Microsoft Outlook/Hotmail account, Mail Cleanup accesses your email address, provider account identifiers, message identifiers, dates, senders, subjects, labels/categories, starred/flagged status and message contents to search, apply keep rules, count matches and show optional previews. When you request ZIP + EML export, it reads the full MIME message, including embedded attachments. Cloud attachment links remain links.

When you confirm cleanup, the app moves your selected messages to Gmail Trash or Outlook Deleted Items. It does not send email or permanently delete messages. Provider retention rules still apply; Gmail normally automatically deletes Trash after 30 days. Outlook retention depends on your account and provider settings. An interrupted move request may already have succeeded.

Where data goes

Mailbox requests travel directly between your phone and Google or Microsoft over HTTPS. We do not operate a mailbox-processing server and do not receive, sell or rent your email contents. We have not added advertising or app analytics SDKs. Google and Microsoft sign-in services and Google Play may process app/device identifiers, sign-in diagnostics and transaction information to provide their services under their own policies. Their service processing is separate from developer-operated analytics. We do not use mailbox data to train AI models.

Previews stay in app memory. Matching message identifiers and paging cursors are temporarily stored in private app cache while you review or clean up a search. A ZIP export is temporarily staged in private cache before it is saved and verified. These temporary files are removed after their operation/session, or on the next app launch after an interruption. Android may also clear cache.

You choose the saved ZIP destination through Android’s document picker. It may be local storage or a cloud document provider. That provider receives the archive if you choose its storage, subject to its own privacy terms. ZIPs contain full email contents and are not encrypted by Mail Cleanup. They remain after disconnecting or uninstalling; delete them yourself in the chosen location. Do not share them with people who should not read the messages.

Sign-in and local settings

Google Play services and Microsoft’s MSAL library handle authorization. Microsoft keeps an encrypted local token cache. Mail Cleanup does not ask for or store your mailbox password. Access tokens are used to make authorized provider requests. Private settings store saved mailbox shortcuts (provider, email and account identifiers), filter/backup preferences, protected sender addresses, and a UTC date plus attempted cleanup count for the free daily allowance. The allowance is shared across mailboxes on this installation.

Premium purchases

Google Play handles the optional one-time Premium purchase and payment details. The app uses Google Play Billing to query purchases, validate signed purchase records and acknowledge completed payments. It does not receive your card number. The billing library processes purchase identifiers and related transaction information under Google’s terms. No mailbox address or email content is sent by Mail Cleanup to a billing server. Premium is restored using the Google Play account that bought it; checking purchases requires Google Play connectivity. A successful purchase query can remove access to a revoked or refunded purchase. Client-side validation has limits; we do not currently operate a purchase-verification backend.

Disconnect, revoke and delete data

Disconnect on the Account step clears the active mailbox session and removes its saved shortcut. Outlook Disconnect also removes that account’s cached MSAL tokens. Removing a shortcut alone does not revoke provider permission. Revoke access in Google Account connections or Microsoft app permissions. Provider settings and browser sign-in sessions are managed by the provider.

To remove all data held by this app, use Android Settings → Apps → Mail Cleanup → Storage → Clear storage, or uninstall it. This removes saved settings, local caches and the app’s Microsoft token cache. It does not delete your Google/Microsoft account, mailbox, provider-held authorization or exported ZIPs. Mail Cleanup does not create a separate account on our servers. Google Play retains purchase records under its own policies; clearing app data does not refund a purchase. Restore purchases with the same Play account after reinstalling.

Google API Limited Use

Mail Cleanup’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Mail data is used only to provide the search, preview, export and user-confirmed cleanup features you request. We do not use it for advertising, credit decisions or human review.

Support and changes

If you email support, we receive what you choose to send and use it to respond. Do not send passwords, access tokens or full mailbox exports. This app is intended for people managing their own authorized mailboxes, and is not directed to children. We may update this policy as the app changes; the effective date identifies the current copy. Google and Microsoft also handle data under their own Google privacy policy and Microsoft privacy statement.