Privacy Policy
multiple-gmail, an open-source desktop app for Windows, macOS and Linux. Effective date: 2026-10-20. Last updated: 2026-10-20.
Summary
multiple-gmail runs on your own computer, with your own Google OAuth client. The app does not send your data to the developer or to any third party. Your Gmail data goes only between your computer and Google.
Who runs the app
multiple-gmail is free software that each person installs and runs themselves. The developer does not operate a service, does not receive your mail, and cannot see your accounts. You create your own Google Cloud project and OAuth client, so you are the one who authorizes access to your Gmail accounts.
What data the app accesses
When you connect a Gmail account, the app accesses it through Google's Gmail API with the
https://www.googleapis.com/auth/gmail.modify scope. This data is used only to provide the features you ask
for through your AI app: searching mail, reading messages and threads, creating drafts, sending a message after you
approve it, and managing labels. The app also reads your email address so it can show which account is connected.
The app has no tools to delete mail, drafts or labels.
How data is stored
Access tokens, refresh tokens and your OAuth client credentials are stored only on your computer, in an encrypted form (AES-256-GCM). The encryption key is protected by your operating system for your user account: Windows DPAPI on Windows, the macOS Keychain on macOS, and the Secret Service keyring on Linux. On Linux without a keyring, the key is kept in a file that only your user account can read (permissions 0600), inside the app's data folder. The app does not store your mail on disk. Mail content that an AI app receives from the tools is handled by that AI app under its own terms and privacy policy.
What is shared
The app sends no data to the developer, and it does not use analytics, advertising or tracking. It does not sell, rent or transfer your data to third parties. The only network traffic is between your computer and Google's APIs.
Optional server mode
The project includes an optional mode for running multiple-gmail on a server, for web AI apps. In this mode you run and control the server yourself. Data then stays on the server you operate. The developer has no access to it.
Google API Services User Data Policy
The use and transfer of information received from Google APIs by multiple-gmail adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data from your Gmail account is used only to provide and improve the user-facing features you request, is not used for advertising, is not sold, and is not read by humans except as you direct it through your own AI app or as required by law.
Your control: revoke access and delete data
- Revoke the app's access to your Google account at any time at https://myaccount.google.com/permissions.
- Remove an account inside the app. This also asks Google to revoke its token.
- Delete all local data by deleting the data folder:
%LOCALAPPDATA%\multiple-gmailon Windows,~/Library/Application Support/multiple-gmailon macOS, and$XDG_DATA_HOME/multiple-gmail(usually~/.local/share/multiple-gmail) on Linux. On macOS the key is also stored in the Keychain asmultiple-gmail-master-key, and on Linux in the Secret Service keyring under the label multiple-gmail; you can delete it there too.
Changes to this policy
If this policy changes, the new version will be published on this page with an updated effective date.
Contact
For questions about this policy, open an issue at https://github.com/EFK44/multiple-gmail/issues.