Privacy·Plain English
How we treat your privacy.
You're thinking about putting your parent's email in our hands. That's a real thing to ask, and you deserve a straight answer about what we can see, what we can't, and what we'll never do. Here it is, in plain English.
§Section 1 · The honest part first
What Mailicity can see.
We're not going to pretend Mailicity is magic. To do its job (showing your parent only the people you've approved), it has to connect to their email account. That means, technically, Mailicity can access the email in that account. We'd be lying if we said otherwise, and we'd rather be straight with you.
So here's exactly what that access is for, and exactly what we do with it.
-
To sort the inbox, we check who each email is from.
That's the core job. When an email arrives, Mailicity looks at the sender to decide whether it goes to your parent or to your review queue. That's the check that keeps their inbox calm.
-
When they open a message, we fetch it so they can read it.
We pull that message from their real mailbox at the moment they tap it and show it on the iPad. Any copy we keep afterwards is temporary, just so it loads quickly next time (more on that below).
-
Your review queue shows you messages from unapproved senders.
That's the point of the queue. You see what's trying to reach your parent so you can decide. You're seeing it because you're the family admin they've entrusted to look after this, not because we're handing private mail around.
That's the access. Now here's what we don't do with it.
¶Section 2 · The commitments
What we will never do.
These aren't aspirations. They're commitments, and they're built into how the product actually works.
-
We never read their mail for our own purposes.
No human at Mailicity sits and reads your parent's email. The sorting is automatic. We're not interested in the contents of their messages, only in helping the right ones reach them.
-
We never sell data. To anyone. Ever.
There is no version of Mailicity's business that involves selling your parent's information. We're paid by families, for the product. That's the whole model. If anyone ever offers to buy the data, the answer is no.
-
We never show ads.
Your parent's inbox is not advertising space. It never will be.
-
We never train AI on the messages.
Their emails are not fuel for somebody's model. We don't use them to train anything, ours or anyone else's.
-
We don't keep their messages sitting around.
We don't store the contents of their emails long-term. Full messages are fetched from their real mailbox and only cached briefly, so they load quickly. Exactly what we keep, and for how long, is spelled out in the next section.
⏳Section 3 · What we keep
What we keep, and for how long.
Their email lives in their own mailbox, with their provider. We don't move it to us. Here's the small amount we do keep to make the inbox work, and how long it stays.
-
A few details about each message, while the account is open.
To show them a calm inbox, we keep some details about each message for as long as their account is open: who it's from, who it's to, the subject, the date, whether it has attachments, and a short preview of the text (about the first 500 characters).
-
Full messages, only briefly.
When they open a message, we fetch the full text from their real mailbox and keep a temporary copy for up to 7 days so it loads quickly, then delete that copy automatically.
-
Attachments stay in their mailbox.
We keep only an attachment's details: its file name, type, and size. The file itself stays in their mailbox; we fetch it when it's needed and may keep a copy so it opens quickly next time.
-
Never for ads, sales, or training.
We never read any of this for ads, we never sell it, and we never use it to train anything.
-
When you close the account, it's deleted.
If you close the account, we permanently delete everything we hold (including any cached copies) within 30 days.
⚿Section 4 · Credentials
How their credentials are protected.
The connection to their email account is the most sensitive thing Mailicity holds, and we treat it that way.
-
Their email credentials are encrypted.
The keys and passwords that let Mailicity connect to their account are encrypted before they're stored, using strong, current encryption. They're never written into logs, never shown in the admin app, never sent anywhere they don't need to go.
-
The connection is yours to revoke.
If you ever disconnect Mailicity, the connection to their email ends and their account carries on exactly as it was. Mailicity doesn't own their email. It borrows access to do a job, and you can end that any time.
◐Section 5 · The map
Who sees what.
A quick map of who sees what, because "privacy" in a product with a protected person and a family admin means being clear about the people, not just the company.
Just their own inbox.
The approved messages, on their iPad. They don't see the queue, the rejections, or the admin side.
The queue, the tools, the log.
The review queue and the management tools. If you share admin duties with siblings, there's a log of who approved or blocked what, so the family can see each other's actions, by design, because nobody should be the secret sole gatekeeper.
Only what it needs to run.
The technical data needed to run the service, and nothing it doesn't need. Not the contents of their mail, beyond the automatic sorting described above.
※Section 6 · A note
About the person being looked after.
Mailicity is usually set up by one family member for another. We think that carries a real responsibility, so we'll say plainly where we stand: Mailicity is built for situations where a family is caring for someone with their wellbeing at heart, often with their knowledge and trust.
It's not a surveillance tool, and we'd ask you not to use it as one. The audit log, the multi-admin visibility, and the dignity of the design are all there for a reason. This is about looking after someone, not watching them.
⚖Section 7 · The authoritative version
The legal version.
Everything above is the plain-English version, written to be read. There's also a formal privacy policy: the complete, legally precise document covering exactly what data we collect, how long we keep it, your rights, and how we comply with privacy law in the places we operate. It's less of a pleasant read, but it's the authoritative one.
The full privacy policy.
The formal, legally binding text. If anything in the plain-English version above ever seems to disagree with the formal policy, the formal policy is the one that governs, and please tell us, because it means we've explained something badly and we'll fix it.
Read the full privacy policy →One document is meant to be readable; the other is meant to be precise. Both should be honest.