Privacy Policy
Last updated: 2 November 2026
In short: Zee Mail is an app that runs on your device and connects directly to your organization’s mail server. Your mail, calendar and contacts never pass through any server of ours. The app uses no third-party crash reporting; the mobile app sends a few anonymous events to Google Firebase to measure ad performance, only where no consent is required and never with mail content or email addresses (section 7). The mobile app also shows one small non-personalized Google AdMob ad at the top of the Inbox (never for @vnpt.vn accounts or after you buy “Remove ads”); AdMob never receives your mail, email address or contacts (section 7). All other extra connections are listed in section 2.
Scope
This policy covers the Zee Mail app on Windows, Android, iOS (once released) and the zeemail.pages.dev website. Zee Mail is developed by ZeeDev. Contact: info@zeemail.dev.
Where your data goes
When you sign in, the app connects directly to your organization’s mail server over HTTPS. Mail, calendar, contacts and tasks travel only between your device and that server. We run no intermediary server, keep no backup of message content, and have no way to read your mail.
Besides your mail server, the app makes only these connections:
| Connection | When | What is sent |
|---|---|---|
| Update check (Windows) — Zee Mail’s release server (zeemail.pages.dev, hosted on Cloudflare Pages) | 20 seconds after launch and every 12 hours; can be turned off in Settings | A request for the version file; like any web request, the server sees your IP address. No email or mail data is sent. |
| Public IP lookup (Windows) — api.ipify.org, fallback icanhazip.com | On by default, at most once every 30 minutes. Turn off in Settings › Security › Devices | A request carrying no data; the service returns your IP address for the device list (section 3). |
| Internet images in messages | Only if you allow it (off by default) | The image host may learn that you opened the message. |
| Links in messages | Only when you tap and confirm | Your browser opens the page as usual. |
| Newsletter unsubscribe (mobile) — the newsletter sender’s server | Only when you tap “Unsubscribe” and confirm | A standard unsubscribe request (RFC 8058) to the address named in the message, or an unsubscribe email sent from your account. The sender sees your device’s IP address; no password or other mail content is included. |
| Google AdMob (mobile) | When the Inbox shows an ad — never for @vnpt.vn accounts or after buying “Remove ads” | See section 7. |
| Google Firebase — measurement (mobile) | Only while measurement is on (regions where no consent is required) — see section 7 | A few anonymous events and device information; never mail content or email addresses. |
| Google Play / App Store (mobile) | When you buy or restore “Remove ads”, and when the app opens (to check the purchase is still valid) | Requests to your platform’s store, which handles payment. The app only receives the purchase status and transaction ID. |
Device list (Windows)
So you can see the devices using Zee Mail with your account and revoke them, the Windows app writes one entry per device into the properties of your own mailbox on your organization’s mail server: operating system name and version, CPU architecture, app version, first/last use and the public IP address (unless you turn it off). Your mail server administrators can read this. It is not sent to us.
Data stored on your device
To open quickly and work offline, the app keeps a copy of what you have synced (mail, calendar, contacts, tasks) in a database encrypted with SQLCipher (AES-256). The encryption key lives in the operating system’s secure storage (Windows Credential Manager, Android Keystore, iOS Keychain).
Attachments you download are saved as regular files in the folder you choose or in the app’s documents folder.
Passwords and sessions
The session issued by your mail server is kept in the operating system’s secure storage. To sign you back in when a session expires, the app can store your password in the same place: the Windows app stores it only if you choose “Personal device” when signing in (“Shared device” saves nothing); the mobile app stores it by default. Your password is only ever sent to your organization’s mail server.
System permissions (mobile)
- Contacts — only if you turn on “Sync contacts to this device”.
- Calendar — only if you want your phone’s calendar shown alongside your work calendar.
- Notifications — new mail and reminders, created on the device (no third-party push service).
- Biometrics / Face ID — only if you turn on App lock; the app receives a yes/no result from the operating system, never fingerprint or face data.
The app does not read your location or access the camera or microphone.
Ads, measurement and purchases (mobile)
Zee Mail is an independent app supported by one small ad at the top of the Inbox. Ads come from Google AdMob and are always non-personalized: the app does not let AdMob use an interest profile, sends no keywords or mail context, and never asks for tracking permission on iOS.
- AdMob receives: the device advertising ID, IP address (and the approximate location derived from it), device type and OS version, and ad interactions (impressions, taps) — used to serve ads, cap frequency, measure and prevent fraud. How Google uses data: policies.google.com/technologies/partner-sites.
- AdMob never receives: message content, subjects, your email address, contacts, calendar or mail account details.
- AdMob is not loaded when the open account belongs to @vnpt.vn or the device has bought “Remove ads”.
- Where the law requires consent (for example the EEA and the UK), the app asks first with Google’s consent form; change your choice in Settings › Remove ads › Ad privacy choices.
Install and ad measurement (Google Analytics for Firebase). To measure ads that bring in new users, the app sends a few anonymous events to Firebase: first open, successful sign-in (with the number of accounts on the device), first message sent, and a “Remove ads” purchase (with price and currency).
- Firebase receives: those event names and numbers, the device advertising ID and app instance ID, device type, app and OS version, and IP address.
- Firebase never receives: message content, subjects, your email address, contacts, calendar, search terms or transaction IDs.
- When it is on: measurement is off when the app starts and turns on only when Google’s consent form determines that your region needs no consent. In regions that require consent (for example the EEA and the UK) and on devices that have never shown an ad (@vnpt.vn accounts, after buying “Remove ads”), it stays off.
- The app does not create a push token (Firebase Cloud Messaging); new-mail notifications are still created on the device.
Remove ads is a one-time purchase through Google Play or the App Store. The store handles payment; the app never sees your card or payment details, only the purchase status and transaction ID, which it keeps on the device. The purchase belongs to your store account; we run no server that stores purchases.
What we don’t do
- No third-party tracking or crash reporting; measurement is limited to a few anonymous Firebase events and ads come only from non-personalized AdMob (section 7).
- We do not sell your data or share your mail, contacts or calendar with anyone.
- The app is not directed at children under 13.
This website
zeemail.pages.dev is a static site. It sets no cookies, uses no analytics and loads no fonts or scripts from third parties. Our hosting provider (Cloudflare) may keep technical access logs (such as IP addresses) under its own policy.
Your choices
- Sign out of an account to remove its session, saved password and all of its data from the device.
- Uninstall the app to remove everything else.
- Mail, calendar and contacts on the server are managed by your organization; ask your IT team to back up or delete them under its policies.
Changes and contact
When the app’s behaviour changes (for example, instant push notifications), we update this page before the release and note the date at the top. Questions: info@zeemail.dev.