Privacy policy

The short version

Dispatch runs on your devices. Your mail travels only between your Mac, iPhone or iPad and your mail provider (such as Google, Apple or Microsoft). The makers of Dispatch never see your mail, contacts or passwords. The one exception to "no server" is optional: if you turn on new-mail notifications in the iPhone or iPad app, a small notification relay learns that one of your Gmail addresses has new mail, so it can wake your phone (see New-mail notifications). The message itself never goes through it.

What Dispatch accesses

• Gmail and Google Workspace: with your permission, through Google's Gmail API (scope gmail.modify), to show, search, send, label, archive and delete your mail and to keep drafts in sync.
• iCloud Mail and other IMAP accounts: through the standard IMAP and SMTP protocols, using an app-specific password you create. For a provider that isn't built in, Dispatch looks up its server settings in Mozilla's public database (autoconfig.thunderbird.net); only the domain of your address is sent, never the address or a password.
• Outlook and Microsoft 365: you sign in on Microsoft's own page in your browser. The sign-in token is kept in your Keychain and sent only to Microsoft.
• Calendar and Reminders: only if you use a calendar or task feature, after macOS asks you. Dispatch uses it to show your agenda, check an invitation for conflicts and add the events and reminders you choose. This data never leaves your Mac.

Dispatch uses this access only to provide its mail features to you. It does not use your data for advertising, does not sell or transfer it, and does not use it to train AI models.

Where your data is stored

• Sign-in tokens and passwords are stored in your device's Keychain (Mac, iPhone or iPad).
• A cache of recent message headers and opened messages is stored on your Mac (in ~/Library/Application Support/Dispatch) so mail opens instantly. Deleting that folder or removing an account clears it.
• Settings and drafts are stored in the app's preferences on your Mac.

New-mail notifications on iPhone and iPad

iPhones don't let apps check mail in the background on their own, so for instant notifications Dispatch uses a small relay run by the makers of Dispatch on Cloudflare. It is used only if you turn notifications on for a Gmail account in the iPhone or iPad app. When you turn notifications on, your device proves it's signed in to that address (Google confirms it); the relay never keeps your sign-in.

• What the relay receives: when Gmail has new mail for that account, Google's push service tells the relay the account's email address and a mailbox change number. The relay then sends your device a wake-up through Apple's push service containing only the account and the message's id.
• What it never receives: the message, its sender, subject or text, your contacts, or any password, and it never keeps a sign-in token. Your device fetches the new message itself, directly from Google with your own sign-in, and only then shows its sender, subject and opening lines in the notification.
• What it keeps: each Gmail address you turned notifications on for and your device's push token, so it knows where to send the wake-up. Nothing else is stored or logged. Turning notifications off, removing the account or deleting the app deletes them.
• iCloud and other IMAP accounts never use the relay: the app checks them in the background as often as iOS allows, so no server ever holds an iCloud password.

Update checks

Dispatch for Mac checks newitools.app for updates about once a day. The request includes the app and macOS version. Only the number of checks per version is counted; nothing that identifies you is stored.

Sender logos

To show company logos next to messages, Dispatch asks Google's public site-icon service for the icon of each sender's domain (for example "example.com"). Only the domain is sent, never the message or your address, and each icon is kept on your Mac afterwards so a domain is asked for once. Personal mail domains (such as Gmail, iCloud and Outlook) are never looked up. You can turn logos off in Settings › Privacy, and then no domains are sent.

Tracking pixels

Many marketing emails hide tiny images that tell the sender when you opened them. Dispatch removes these before showing a message (Settings › Privacy › Block trackers, on by default), so they are never fetched.

Optional AI features

AI features are off by default, and each one is turned on separately with its own provider. Dispatch then sends only what that feature needs to the AI provider you chose for it: sender, subject and a short snippet for sorting; your draft, or the message you're answering, for a draft check or a suggested reply; the text of a long message or conversation for a summary or tasks; recent senders, subjects and snippets for the daily briefing; and for Ask your inbox, your question plus the messages that best match it or that the assistant looks up with Dispatch's read-only mail tools (it can search and read, never send, archive or delete). The provider can be your own ChatGPT, Claude or Gemini subscription through its command-line tool, an API key you provide, or a model running locally on your Mac. That provider's own privacy policy then applies. Nothing is sent to the makers of Dispatch.

MCP server for AI tools

Dispatch includes an MCP server for AI tools on your Mac, such as Claude Code or Codex. It is not a network service: it is a command (DispatchMail --mcp) that a program on your Mac runs and talks to over standard input and output. A tool you add it to can read your cached mail, search, archive, star, mark read and create drafts. Sending mail stays off until you turn on Settings › MCP › Let AI tools send mail. To stop a tool using it, remove the dispatch server from that tool's settings.

Google API Services User Data Policy

Dispatch's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access

Remove an account in Dispatch's settings to delete its tokens and cached mail from your Mac. You can also revoke Google's permission at myaccount.google.com/permissions and delete an iCloud app-specific password at account.apple.com.

Children

Dispatch is not directed at children under 13.

Changes

If this policy changes, the new version will be posted on this page with a new date.

Contact

Questions: hello@newitools.app