OrcaMail privacy policy

1. Controller

2. In short

OrcaMail is a mail, calendar and contacts app that connects to a mail server of your choice. We run no user account for you, show no ads and use no analytics or tracking tools. Your mail, events and contacts travel between your device and your mail server and are stored on your device. We never receive them.

3. Your mail server

The app connects to the JMAP server you enter when you sign in, such as your own server or a provider's. Processing on that server is the responsibility of its operator. The app keeps credentials (passwords, tokens) only in your device's Keychain.

4. Push notifications through OrcaMail Push

To announce new mail on iPhone and iPad right away, we run the OrcaMail Push service (push.orcamail.app). Your mail server reports changes to it, and it forwards them to your device through the Apple Push Notification service (APNs). OrcaMail Push is not used on the Mac. Instead of OrcaMail Push you can enter a relay server of your own in Settings; we then receive none of this data.

We process:

• a random device identifier per account, created by the app
• the APNs device token Apple assigns to your device
• the time of registration
• to verify OrcaMail Pro, the purchase confirmation signed by Apple: original transaction identifier, product, period and any refund. It contains neither your name nor your Apple Account.
• the change notifications from your mail server. They contain no message content and are encrypted end to end with keys created on your device (RFC 8291); we cannot read them.
• technical request logs (time, result, device identifier)

Change notifications are stored only during the 15 minutes after a registration, so the app can confirm the subscription with your mail server, and are deleted after 24 hours at the latest; after that they are only passed through. Registrations are deleted when the app unregisters the device or Apple reports the token as invalid. Logs are deleted after 14 days, database backups after 35 days at the most.

The service runs at Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg, in the Frankfurt am Main region, and is delivered through Amazon CloudFront. Amazon acts as our processor. A transfer to the USA cannot be ruled out; Amazon participates in the EU-U.S. Data Privacy Framework. More information: AWS privacy.

The legal basis is Art. 6(1)(b) GDPR (providing the service you chose), and Art. 6(1)(f) GDPR for logs (secure operation).

5. OrcaMail Pro and RevenueCat

OrcaMail Pro is a subscription you buy through the App Store. Apple alone handles payment; we receive no payment details. To check and restore purchases we use RevenueCat, Inc., 1032 E Brandon Blvd #3003, Brandon, FL 33511, USA, as our processor.

This involves a random, anonymous user identifier, your purchases and subscription states, and technical details (app version, operating system, language, App Store country, IP address of the request). We give RevenueCat neither your name nor your email address nor anything about your mail server, and we use none of RevenueCat's advertising, attribution or analytics features.

The transfer to the USA is based on the European Commission's standard contractual clauses. More information: RevenueCat's privacy policy. The legal basis is Art. 6(1)(b) GDPR.

6. Apple services

• App Store and subscriptions: purchase, billing, cancellation and refunds go through Apple.
• Push notifications: notifications are delivered through the Apple Push Notification service.
• iCloud settings sync (optional, off by default):when you turn it on, the app's settings, your list of accounts (server address, username) and your favourites are stored in your private iCloud database, and credentials in iCloud Keychain. We have no access to them. Mail, events and contacts never go through iCloud.
• Apple Calendar and Contacts (optional):with your permission the app shows data from your device's calendar and contacts. It does not leave your device.
• Translation:messages are translated on the device by the operating system's translation feature. The system downloads language packs from Apple.

Apple's privacy policy also applies to this processing.

7. Remote content in messages

Remote images in messages are blocked by default, because they can tell the sender when and where you open a message. If you load them for a message or a sender, your device fetches them directly from that server, which then learns your IP address. The same applies to links you open and to unsubscribing from newsletters.

8. Diagnostics

The app collects the operating system's crash and performance reports on your device only. They are sent only if you export them yourself in Settings and send them to us, for example by email. Section 3 of the general privacy policy applies to that message.

9. Your rights and right to complain

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). As we do not identify you, please give us the device identifier shown in the app under Settings ▸ Diagnostics for a request about OrcaMail Push. You may also lodge a complaint with a data protection supervisory authority, in particular: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) Promenade 18, 91522 Ansbach https://www.lda.bayern.de.

10. Last updated

This privacy policy is valid as of 20 October 2026.