Privacy policy

Last updated November 5, 2026

Who we are

Mills Super Mail ("the app", "we") is operated by Mills Creative Marketing, Orlando, Florida, USA. Contact: david@millscreativemarketing.com.

Information from your Google account

When you sign in with Google and connect an account, we ask Google for:

• Your name, email address and profile picture, to create your Mills Super Mail account and show which account is which.
• Access to your Gmail (the scope https://mail.google.com/), so the app can show your email, send email you write, apply labels, archive, move to Trash, and permanently delete email when you choose Delete forever or Empty Trash. Permanent deletion is the reason the app needs this scope rather than a narrower one.

The app on your device reads your email directly from Google each time you open it. Our server reads Gmail only to do things you have asked for while the app is closed:

• Sending emails you scheduled, bringing back snoozed emails, and checking for replies to emails you asked to be reminded about.
• Moving new email from senders you blocked to Trash.
• New-mail alerts: when new email arrives in your inbox, the server reads its sender, subject and a short preview to put in the alert on your device. This is passed to Apple's or your browser's notification service and is not saved.

What we store

• Account details: the email address and name of each account you connect, the color you chose for it, and your signatures (including images in them).
• Google tokens: the access and refresh tokens Google gives us, encrypted, so the app keeps working without signing in each time.
• Read receipts: for emails you send with a read receipt, the subject, the recipients and the send time; and for each open or link click, the time, the type of mail app or device that loaded it, the approximate country, and the link that was clicked. We do not store IP addresses.
• Things you set up: templates, blocked senders, snoozes, follow-up reminders, and emails scheduled to send later. A scheduled email is stored encrypted until it is sent and then deleted.
• Devices: the notification tokens for devices where you turned on alerts, and a record of signed-in sessions.
• Billing: your plan, trial dates and subscription status. Payments are handled by Stripe; we never see or store your card number.

We do not store the contents of your emails, your drafts (they stay in Gmail), your contacts, or your Gmail search history.

How we use it

Only to run the features of the app for you, keep it secure, and support you when you ask for help. We do not sell, rent or share your data with anyone for advertising or any other purpose, we do not show ads, and we do not use your Gmail data to develop, improve or train general AI or machine-learning models.

Mills Super Mail's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Who can see your data

No person at Mills Super Mail reads your email. The only exceptions are when you ask us to look at a specific problem and give permission, when it is needed for security (for example, to investigate abuse), or when the law requires it.

These service providers process data for us, only to run the app:

• Cloudflare: hosting and the database where the items above are stored.
• Google: your Gmail, through the Gmail API.
• Apple and browser push services (Apple, Google, Mozilla, Microsoft): delivering alerts to your devices.
• Stripe: payments.

Read receipts and the people you email

When you send an email with a read receipt, it includes a tiny invisible image and, if you choose, links that pass through our server. When the recipient's mail app loads the image or they click a link, we record the details listed above and show them to you. You are responsible for using read receipts lawfully where you live and where your recipients live. Emails you receive are protected the other way round: by default the app blocks tracking images that other senders put in their emails.

How long we keep it, and deleting it

• Read receipt history is kept for one year, then deleted.
• Removing an account in Settings deletes what we store for that account and revokes our access to it at Google.
• Deleting your Mills Super Mail account in Settings permanently deletes everything we store about you and revokes our access to all your Google accounts. You can also email us and we will do it for you.
• You can also remove our access any time at myaccount.google.com/permissions.

Security

All traffic uses HTTPS. Google tokens and scheduled emails are encrypted in our database with AES-GCM. Access to production systems is limited to the operator.

Children

Mills Super Mail is not meant for children under 13, and under 16 in the European Economic Area and the UK. We do not knowingly collect data from them.

Your rights

Depending on where you live, you may have the right to see, correct, export or delete your data, and to object to how it is used. Email us and we will respond within 30 days.

Changes

If we change this policy in a way that matters, we will show a notice in the app before the change takes effect. The date at the top shows the latest version.