Kommand Privacy Policy

Effective date: October 2026

Kommand keeps your email on your device and talks only to Google on your behalf. We, Studiolektrik, never receive, see or store your email, contacts or personal data.

About Kommand

Kommand is an email app for Gmail on Mac, iPhone and iPad, made by Studiolektrik. It brings your Gmail accounts together in one calm, focused inbox. You can read and answer mail, snooze and pin conversations, schedule messages, and send files to fixed recipients with Dropshots.

This policy explains which data Kommand uses, why, where it is kept and how you stay in control. It covers the Kommand apps for macOS, iOS and iPadOS.

Data we collect

Studiolektrik does not collect any personal data. Kommand has no account system of its own, no servers that receive your data, no analytics, no advertising and no tracking.

To work as your email app, Kommand accesses data from your Google account after you sign in with Google and give permission. That data travels directly between your device and Google.

Google account data Kommand accesses

You sign in through Google's own sign-in page in your system browser. Kommand never sees your Google password.

Permission (Google scope)What Kommand uses it forWhen it's askedYour name, email address and profile picture (openid, email, profile)Showing which account you're using, and as the sender of your mailAt sign-inRead, compose, send and organise your email (gmail.modify)Showing your mail, sending replies and new messages, drafts, archiving, labels, read/unread, stars, snoozing and moving mail to TrashAt sign-inFull access to your mailbox (mail.google.com)Permanently deleting mail when you choose Empty Trash or Empty SpamOnly the first time you use that featureManage basic mail settings (gmail.settings.basic)Turning your Gmail vacation responder (auto-reply) on or offOnly the first time you save an auto-reply

The data involved is your email messages and attachments, drafts, labels, sender and recipient names and addresses, and the settings above. You can untick optional permissions on Google's consent screen; the related feature then simply stays unavailable.

How we use your data

Kommand uses your Google data only to provide the email features you see in the app, on your own device. Your data is never:

• used for advertising

• sold

• used to build profiles

• used to train artificial intelligence or machine-learning models

No person at Studiolektrik reads your email.

Limited Use

Kommand's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Where your data is stored

Everything stays on your device:

• Mail cache: a local copy of your mail, so Kommand is fast and works offline. On iPhone and iPad it is protected by the device's data encryption. It is excluded from iCloud and computer backups.

• Sign-in tokens: stored in the Apple Keychain on this device only. They are never synced or backed up to other devices.

• Your preferences: pins, snoozes, scheduled messages, signatures and Dropshot settings are stored locally. They may be included in your own device backups.

• Spotlight and notifications: Kommand can add conversations to your device's own search (Spotlight) and show new-mail notifications. The operating system creates both and keeps them on your device.

Network traffic goes over encrypted connections (TLS). Kommand does not keep a web cache of your mail.

Data sharing

Studiolektrik does not share your data with anyone, because we never receive it. Kommand only connects to:

• Google: to read, send and organise your mail through the Gmail API, under Google's own privacy policy.

• Senders' servers, only when you choose: images in an email are blocked by default. If you tap "Load images" or turn on remote images, they are fetched from the sender's servers. Those servers can then see your IP address and when you opened the message. One-click unsubscribe also contacts the sender's server, only when you use it.

• Links you open: these open in your browser, outside Kommand.

  
  

Data retention and deletion

Kommand keeps an account's data on your device only for as long as that account stays signed in to Kommand:

• Remove an account (Settings › Accounts › Sign out): Kommand revokes its access at Google. It also deletes all locally stored mail, attachments, search entries, notifications and sign-in tokens of that account.

• Log out of Kommand: removes all accounts and all of Kommand's local data.

• Delete the app: removes all of Kommand's data from your device.

• Revoke access from Google: you can remove Kommand's access at any time on your Google Account permissions page.

Deleting data in Kommand does not delete your email at Google, unless you explicitly delete messages or empty Trash or Spam.

Security

Kommand protects your account and data in these ways:

• It signs in with Google's recommended secure sign-in for apps: OAuth 2.0 with PKCE, in the system browser.

• It stores sign-in tokens in the Apple Keychain.

• It encrypts all network traffic.

• It blocks scripts in email content.

• It blocks remote images by default.

• On Mac, it runs in Apple's App Sandbox.

Your privacy rights

Studiolektrik does not collect, store or process your personal data on its own systems. That means we hold no data about you to access, correct or delete. You control your data in Kommand and in your Google account at any time, as described above. For data held by Google, see Google's privacy policy.

Children

Kommand is not directed at children under 13 (or the minimum age in your country) and does not knowingly process children's data.

Changes to this policy

If Kommand starts using data in a new way, we will update this policy and its effective date before the change takes effect. Where required, we will ask for your consent.

Contact

Studiolektrik · seppe@studiolektrik.be