korax/korax-public
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 2 Wiki Activity

privacy policy: describe the optional keyserver and avatar lookups, drop the blanket no-third-party claim (#k-ops/#2/#228)

Browse Source
This commit is contained in:
Eugen Kaparulin
2026-10-18 00:32:51 +03:00
parent 622d8a9f78
commit 2449cda1f3
1 changed files with 12 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
privacy-policy.md
View File

@@ -21,14 +21,23 @@ Korax connects directly to your email provider using the IMAP and SMTP protocols
## What we do not collect
- Korax does **not** operate any servers that receive your data.
- Your email content, credentials, and keys never leave your device through Korax. All network communication goes directly between your device and your configured mail server.
- Your email content, credentials, and keys never leave your device through Korax. Apart from the optional lookups described below, all network communication goes directly between your device and your configured mail server.
- Korax does **not** collect analytics, crash reports, usage statistics, or any telemetry.
- Korax does **not** display advertising.
- Korax does **not** sell, share, or transmit your data to any third party.
- Korax does **not** sell or share your data, and has no analytics or advertising partners.
## Optional lookups
Two features contact a third-party service. Both can be switched off in the app's settings.
- **Key server lookup** (Settings → Auto-lookup Keyservers): to find a contact's public PGP key, Korax sends that contact's email address, or a key ID or fingerprint, to the public OpenPGP key server `keys.openpgp.org`.
- **Remote avatars** (off unless you turn them on): Korax requests a profile picture from Gravatar, which receives a hash of the sender's email address, and a website icon from DuckDuckGo, which receives the sender's domain. These services also see your IP address.
Nothing else leaves your device through Korax.
## Permissions
Korax requests only the **INTERNET** permission, used solely to connect to your configured IMAP/SMTP servers.
Korax requests only the **INTERNET** permission, used to connect to your configured IMAP/SMTP servers and, if enabled, the optional lookups above.
## Data retention and deletion