Privacy

In short

• Your email stays with your email provider. ohm's servers do not store the bodies or attachments of your messages.
• ohm keeps the information it needs to keep your mailbox in sync and what it has learned about your relationships, so the publicist can help you on any device.
• ohm never sells your data, never shows you ads, and never uses your email to train AI models.
• The publicist never sends an email unless you approve it.
• You can remove a mailbox, ask ohm to forget a person, or delete your account at any time.

What ohm keeps

Your account

When you sign in with Google or Microsoft, ohm receives your name, email address, profile picture and the provider's permanent identifier for your account. ohm uses the identifier, not your email address, to recognise you. ohm keeps a record of each device you are signed in on so you can see and end those sessions.

Access to your mailbox

Signing in also asks for permission to read, organise and send email in that mailbox. ohm stores the resulting access and refresh tokens encrypted, and uses them only to provide ohm to you.

What ohm keeps on its servers

• A message index: for each message from roughly the last 90 days, and for conversations with people you have added, the sender, recipients, subject, date, folder, read and flagged state, and the identifiers that link replies together. The index does not contain message bodies or attachments.
• Sync state: where ohm is up to in each mailbox and the subscriptions your provider uses to tell ohm about new mail.
• What ohm has learned: the people you have added, a record of your relationship with each person who matters to you, the state of conversations you may need to follow up on, and a profile of you drawn from your own sent mail and what you tell the publicist. Each item records which email it came from, and you can correct or delete it.
• Your conversations with the publicist.
• Emails you have asked ohm to send, until your provider confirms they were sent.
• Notification tokens for your devices, if you allow notifications.

What stays on your device

To open quickly and work offline, the ohm app keeps a copy of recent mail on your device, including message bodies and the attachments you open. You choose how much in the app's settings. Signing out clears it.

How ohm uses it

ohm uses your information only to provide the service you asked for: showing and organising your mail, keeping it in sync, helping you write and follow up, and remembering what matters about the people you write to. When the publicist or ohm's memory needs the content of an email, ohm fetches it from your provider, uses it for that task, and keeps only what it learned, with a reference to the email it came from.

ohm does not sell your information, does not use it for advertising, and does not use it to train or improve general-purpose AI models.

AI processing

When you ask the publicist something, or when ohm updates what it knows about your relationships, the relevant parts of your email are sent to an AI model to produce the answer. ohm reaches these models through OpenRouter. ohm configures these requests so that model providers may not use your data for training. The publicist only prepares drafts. An email is sent only when you press Send or explicitly tell it to send that email.

Google user data

ohm's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, ohm uses Gmail data only to provide and improve the email features you use in ohm. ohm does not transfer it to others except as needed to provide those features, to comply with the law, or as part of a merger or acquisition with your notice. ohm does not use it for advertising, and people at ohm do not read it unless you ask us to for support, it is needed for security or to investigate abuse, or the law requires it.

Microsoft user data

Mail ohm reads through Microsoft Graph is handled exactly as described above: used only to provide ohm to you, never sold, never used for advertising or model training, and read by people at ohm only with your permission, for security, or when the law requires it.

Who else is involved

• Cloudflare hosts ohm and stores the information described above.
• OpenRouter and the model providers it routes to process the parts of your email needed to answer the publicist.
• Google and Microsoft provide your mailbox and sign-in.
• Apple and Google deliver notifications to your devices, if you allow them.

ohm shares information with these services only to run ohm, and may disclose information when the law requires it.

Keeping and deleting

• Removing a mailbox deletes its index, its sync state and everything ohm learned from it, and revokes ohm's access where the provider allows.
• Asking the publicist to forget someone deletes what ohm kept about them. Their email stays in your mailbox.
• Deleting your account deletes everything ohm keeps about you, revokes ohm's access to your mailboxes and signs out every device. Copies in backups are gone within 30 days.

You can delete your account in the app's settings, or ask us to delete it. You can also withdraw ohm's access at any time from your Google account or your Microsoft account.

Security

Information travels encrypted. Mailbox tokens are encrypted at rest. Each person's data is kept in its own isolated store. ohm asks for a fresh sign-in before sensitive changes such as removing a mailbox or deleting your account. To report a security issue, write to support@collisions.co.

Your choices and rights

You can see and correct what ohm has learned about you and the people you write to, export it, or delete it. Depending on where you live, you may have further rights to access, correct, delete or move your information, or to object to how it is used. Write to support@collisions.co and we will respond within 30 days.

ohm is not intended for anyone under 16.

Changes and contact

If this policy changes in a way that matters, ohm will tell you in the app before the change takes effect. Questions go to support@collisions.co.