Legal
Privacy, in plain language
The short version: your email stays on your device, cloud AI only happens when you choose it with your own key, and what we measure is anonymous counts. The details are below, written to be read. Effective September 2026.
Your email content
TurboMail is a desktop app. Your messages are synced from your provider directly to the app on your computer and cached there. Search, summaries, ranking, drafting, and every other AI feature in local mode run on that device. We do not operate a server that receives, stores, or can read your email.
Account access and credentials
Gmail and Outlook connect through Google's and Microsoft's own OAuth sign-in. TurboMail receives access tokens, never your password, and you can revoke them from your Google or Microsoft account at any time. IMAP credentials you enter are stored encrypted on your device. None of these credentials are transmitted to us.
Cloud AI, when you choose it
If you add your own OpenAI, Anthropic, or Google API key, requests you make in cloud mode go directly from your machine to that provider, under your key and that provider's privacy terms. We are not in that path and cannot see those requests. Local mode remains the default, and the app always shows which model is active.
What we collect, exactly
When you download the beta, we ask for your email address and confirm it with a code. We use it to grant beta access, to record that a download happened, and occasionally to send important product updates. We may also record which link brought you to the site (for example, a social post) so we know which communities find TurboMail useful.
From the app, we receive anonymous usage signals: a random install identifier (generated on your machine and tied to no account), the app version, the operating system, and coarse lifecycle events such as "this install was active today", "an account was connected", and "search was used for the first time". Connection events may include a one-way hash of the account address so we can count unique users without ever storing the address itself; the hash cannot be reversed.
These signals contain no email content, no subject lines, no contact names, and nothing we could use to read or reconstruct your mail. We use them for one purpose: knowing whether the beta works well enough to keep improving.
What we don't do
- We don't read, store, or transmit your email content. We can't; it isn't on our servers.
- We don't sell or share personal data with advertisers or data brokers.
- We don't run third-party ad trackers on the website or in the app.
Deleting your data
Uninstalling TurboMail removes the app and its local cache from your machine. To remove your email address from our beta list, or to ask what we hold about you, write to support@turbomail.ai and we'll take care of it.
Changes
If this policy changes in a way that matters, we'll say so plainly on this page and in the app's release notes, not bury it. This page was last updated in September 2026.
Contact
Turbo AI Labs LLC, Buffalo, New York. support@turbomail.ai