Privacy policy

Controller

Daniel Painter, Tallach 81, 9182 St. Jakob im Rosental, Austria, daniel@angaro.io

Principle

Angaro Mail is built so that as little data as possible reaches our server. The apps fetch your emails directly from your mail provider and store them on your device.

Visiting the website

When you open angaro.io our hosting provider processes technically necessary data (IP address, time, requested address, browser identifier) in server logs to deliver the website and fend off attacks (Art. 6(1)(f) GDPR). Logs are deleted after 30 days at the latest.

We do not use analytics or advertising cookies. We only store a cookie with your language choice and – in webmail – your sign-in in your browser storage.

Hosting: Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Zypern.

Server locations: Angaro Cloud in a data centre in Frankfurt am Main, push service in Nuremberg (both Germany); backups: France. All data stays in the EU.

Cookie-free audience measurement: when you open a public page, your browser sends the page address, the domain of the referring website and the screen width to our server in Frankfurt. We only keep daily totals (views per page and source). To avoid counting visitors twice, we derive a non-reversible hash from the IP address and browser identifier using a secret that changes daily; it is deleted after two days and the IP address itself is not stored. No cookies are set and no data is shared with third parties. The web mailer and account pages are not measured (Art. 6(1)(f) GDPR).

Angaro account and sync

For the optional Angaro account we store your email address, a sign-in key derived from your password and additionally hashed, signed-in devices and your purchases (Art. 6(1)(b) GDPR).

Contacts, templates, settings, sorting rules, folder names and – if switched on in the app – your mail accounts including passwords or sign-in tokens are encrypted on your device with AES-256 before they reach our server (end-to-end encryption). We do not know the key and cannot read this data. Exception: for push notifications, the credentials of your mail accounts are additionally encrypted for our push service (see “Push notifications”).

You can delete the account at any time in the app or under “Account” on this website. All stored data is removed.

Webmail

Company logos next to senders are fetched once by our server from the sender’s website (e.g. ebay.com) and cached. Only the sender’s domain is used – not your address or the content of the mail. No logos are loaded for personal mail providers (e.g. Gmail).

In webmail your browser decrypts your mail accounts. For each action (e.g. opening a folder, sending an email) it transmits the credentials encrypted (HTTPS) to our server, which uses them to sign in to your mail provider and returns the result.

Credentials and email contents are not stored. An open connection to the mail server is kept in memory for at most 5 minutes to speed up the next action and then closed (Art. 6(1)(b) GDPR).

For accounts using “Sign in with Google/Microsoft”, our server uses the encrypted sign-in token to obtain a short-lived access key from Google or Microsoft, which is only kept in memory.

Payments

Purchases of Angaro Pro – on the website and in all apps – are handled by Stripe Payments Europe Ltd. (Ireland). We only receive what is needed to unlock features (e.g. product, period), no card details. Transfers to the USA are covered by standard contractual clauses or the EU-US Data Privacy Framework.

Open detection (Angaro Pro)

When open detection is on, a sent email contains an invisible image from our server and a visible note for the recipient. When the image loads, we store, under a random identifier, only the time of the first and last opening and the number of openings (Art. 6(1)(f) GDPR). We do not store the recipient’s IP address or browser identifier for this; they may only appear briefly in the hosting provider’s server logs (see above). Subject and recipients are known only to your device (end-to-end encrypted). Entries are deleted after 180 days.

AI assistant (Angaro Pro)

Only when you choose “Summarize” or “Suggest reply” is the text of that one email sent to Anthropic PBC (USA) to produce the result. The data is not used for training and not stored permanently.

For the daily briefing, only senders, subjects, open commitments and today’s events are sent – no email text.

Large attachments (Angaro Pro)

Large files are encrypted in your browser with AES-256 and stored in parts with the storage service of Hetzner Online GmbH (data centre in Germany). The key is only in the download link and never reaches our servers; we only store the size, expiry date and number of downloads. Files are removed when they expire (at most 30 days) or when you delete them (Art. 6(1)(b) GDPR).

Encrypted email (PGP, Angaro Pro)

Keys are created in your browser; the private key is stored only end-to-end encrypted in your Angaro account. Encryption and decryption happen solely in your browser. When looking up a contact’s key, our server queries the mail provider (Web Key Directory) or keys.openpgp.org with that email address. We only publish your own public key when you ask us to.

Rules (Angaro Pro)

Rules are stored as a Sieve script directly on your mail server and applied there. Angaro does not store them.

Reminders, quiet hours and undo send

Reminders, quiet hours and the sending delay run in your browser; settings are synced end-to-end encrypted.

Push notifications

So that you hear about new email immediately, even when the app or browser is closed, our push service watches your inboxes from a server operated by Hetzner Online GmbH in Germany. For this, your devices upload the credentials of your mail accounts (password or sign-in token) in encrypted form; only the push service can open them with its private key, not the rest of the Angaro server. When new email arrives, the push service reads only the sender, subject and markers such as “newsletter” – never the email text or attachments – and stores none of it (Art. 6(1)(b) GDPR). If you schedule an email (Pro), the finished email and your outgoing-server login are encrypted on your device for the push service and stored until the send time; after sending it is deleted. For the protection statistics, the apps and webmail count only anonymous daily totals (emails checked, tracking pixels blocked, scripts removed, warnings) – with no senders, subjects, content or link to you.

Sender and subject are encrypted for the key of your device and delivered via Firebase Cloud Messaging by Google Ireland Ltd., and on Apple devices additionally via the Apple Push Notification service. Google and Apple only receive encrypted data, a device token and the time; decryption happens on your device. A transfer to the USA is possible; the EU-US Data Privacy Framework or standard contractual clauses apply.

You can switch notifications off per account or entirely. Signed-out devices no longer receive notifications. If you remove a mail account or delete your Angaro account, the stored credentials are deleted. Birthday and deadline reminders are still created only on your device.

Profile picture (optional)

You can add a profile picture for each email account and share it with other Angaro users (off by default). Only once you share it is the picture stored in Angaro Cloud (Frankfurt) and retrievable by other Angaro users who receive an email from that address. The public list contains no addresses, only a checksum (hash) of each address (Art. 6(1)(a) GDPR – consent).

So that nobody can add pictures for other people’s addresses, we send a one-time confirmation code to the address; the app reads it itself and deletes the email. You can turn sharing off or remove the picture at any time – it is then no longer retrievable.

Emails from Angaro

We send confirmation, sign-in and service emails (e.g. confirmation codes, billing notices) via Brevo (Sendinblue SAS, Paris, France) as a processor. The recipient address, subject and content of these emails are processed (Art. 6(1)(b) GDPR).

Safety Check and checking tool

Safety Check examines emails on your device or in your browser. To compare against the blocklist of known phishing domains, the apps and the webmailer send only the first characters of a SHA-256 hash of the domains to Angaro Cloud – not the domains, links or contents of the email. The comparison then takes place on your device.

If you report an email as suspicious, we store the sender address, display name, subject, your assessment and the reasons shown, in order to check the sender and rate it for all users (Art. 6(1)(f) GDPR). The email text is not transmitted.

The checking tool at angaro.io/check reads the email only in your browser; it is not uploaded. Only the hashes for the blocklist and the result (green, yellow or red) for our anonymous protection statistics are transmitted.

Inviting friends

If you use an invitation link, we store which account invited you and the status of the invitation in order to credit both accounts with the free month of Angaro Pro (Art. 6(1)(b) GDPR). The inviting person only sees the number of their invitations, not your address.

To prevent abuse, we also store an encrypted hash (HMAC) of your email address. It is kept even after your account is deleted, so that deleting and signing up again does not earn a second reward (Art. 6(1)(f) GDPR). The address cannot be derived from the hash.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Contact us at the address above.

You can also lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).