The short version. InboxScout runs on your computer. Your email, your briefs, your passwords, and everything it learns about you stay there. Cooper Studios LLC has no servers that receive your data, no account system, and no analytics. Data leaves your computer only when you connect a service that needs it, and this page lists every such case.
1. What InboxScout stores, and where
Your email (headers, text, and attachments you allow it to read) in a database file inside the app's data folder on your computer.
What it works out: categories, issues, people, schedules, promises, briefs, and health logs, in the same folder.
Passwords, app passwords, sign-in tokens, and AI keys, encrypted with your operating system's keychain (Windows Credential Manager, macOS Keychain, or your Linux keyring).
Saved website sign-ins for the Assistant, encrypted the same way. The AI model never receives them; the app types them in for you.
Deleting the app's data folder, or uninstalling and choosing to remove data, removes all of it. Nothing is kept anywhere else by us, because nothing was sent to us.
2. When data leaves your computer
Only in these cases, and only because you turned the feature on:
Your mail provider (Gmail, Yahoo, iCloud, Outlook.com, or an IMAP server): InboxScout signs in to read mail, using the credentials you gave it. It never sends, deletes, or moves messages.
An AI helper you connect (for example Google Gemini, Groq, OpenAI, Anthropic, xAI, Mistral, DeepSeek, OpenRouter): message text, and images from attachments if that helper can see images, are sent to that provider to be sorted and summarized, under that provider's own privacy terms. The built-in engine needs no helper and sends nothing. Local helpers (Ollama, LM Studio) stay on your computer.
Delivery you set up: emailing yourself the brief, texting yourself the headline through your carrier's email-to-text gateway, or saving briefs to your Google Drive. These go through your own accounts.
Trusted helpers you name: the short notes, digests, and heads-ups described in the app go by email or text to the people you added, at the sharing level you chose. You can read every message ever sent in the log, and pause them with one press.
The Assistant: when you ask it to do a task on a website, it visits that website from your computer, like a browser would.
Your phone, on your own Wi‑Fi: if you turn on "On your phone", the app serves a page to devices on your local network that present the code from the QR. It is not reachable from the internet.
Other agents on your computer: if you turn on the Agent bridge, programs on the same computer that hold the bridge token can read the brief and, at Full access, do what the app can do.
Update checks: the app asks GitHub whether a newer version exists. This sends the app's version and your computer's general platform, nothing about you.
3. What we never do
We do not run analytics, telemetry, crash reporting, or advertising, and we do not track you on this website.
We do not sell, rent, or share personal data. We have none to share.
We do not use your email to train any model. If you connect an AI helper, that provider's terms govern whether it does; we recommend providers that do not.
4. Google and Microsoft sign-in
If you sign in with Google or Microsoft, InboxScout asks only for read access to your mail (Gmail: gmail.readonly; Microsoft: Mail.Read). Tokens are stored encrypted on your computer and can be revoked at any time from your Google or Microsoft account security page. InboxScout's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5. Children
InboxScout is not directed at children under 13, and we do not knowingly collect data from them. Since we collect none, there is nothing to delete; a parent can simply uninstall the app.
6. Your rights
Because your data never reaches us, requests to access, correct, export, or delete it are things you can do yourself: open the app's data folder, export briefs from the Reports screen, or uninstall. If you believe we hold any personal data about you (for example from an email you sent us), write to hello@inboxscout.ai and we will answer within 30 days. Residents of the EU, UK, and California have the rights those laws provide; we honor them for the little we might hold.
7. Security
Secrets are encrypted with the operating system keychain. The app is read-only toward your mailbox. The source code is public so you can verify these claims. Report a concern privately via GitHub or hello@inboxscout.ai.
8. Changes
If this policy changes in a way that matters, the app shows the new version once at launch and this page's date changes. Old versions are in the history.