Wagahai — Privacy Policy
Wagahai is a mail client that runs on your own computer. This policy describes what it does with the data it reaches through your Google account. It is short because the answer is short: your data stays with you.
What Wagahai accesses
With your consent, Wagahai uses two Gmail permissions:
“Read, compose, send and permanently delete all your email from Gmail”
(gmail.modify) — to show you your messages, to organise them when you do
(labels, archive, trash, star, read), to save drafts, and to send the mail you write.
Wagahai never permanently deletes a message — trash is trash, and the only thing it
deletes outright is a draft of yours it has just replaced with a newer copy; the
permission's wording is Google's and covers more than the app uses.
“See, edit, create or change your email settings and filters in Gmail”
(gmail.settings.basic) — to read the list of addresses your account can
send as, so you can pick one when you write. Wagahai only reads this; it changes no
setting and no filter.
Where your data is
On your computer. Wagahai keeps a local copy of your mail — messages, labels, attachments — in a database in your home directory, and your sign-in token in your operating system's keychain (or an encrypted file where there is no keychain). This is what makes it fast and what lets it work offline.
There is no Wagahai server. Katayama Integrated Development operates no service that your mail, your token, or any information about your account passes through or is stored on. We cannot see your mail. We have nothing of yours to lose, sell, or hand over.
Where your data goes
To Google, and only to Google: the actions you take in Wagahai — sending a message, applying a label — are sent to the Gmail API on your behalf, over TLS. Nothing else is transmitted. One exception is under your control: remote images in a message are blocked, and when you press the key to show them for that message, Wagahai fetches them from the servers the message names, which is how the sender's server learns that the message was opened — the same trade every mail client offers. Wagahai does not send your data to any other third party, does not use it for advertising, does not sell it, and no person at Katayama Integrated Development reads it.
If a future version offers a feature that sends message text to an outside service (for example, a language-model service to suggest how a new sender's mail should be filed), it will be off until you turn it on, per account, and this policy will describe it before the feature exists in a release.
How long, and how to remove it
Your data stays on your computer as long as you keep the account in Wagahai. Removing the account in Wagahai deletes its local mail and its token. You can also revoke Wagahai's access at any time in your Google Account under Security → Third-party apps with account access; Wagahai then can no longer reach your account, and the local copy can be deleted by removing the account or the application's data directory.
Google's requirements
Wagahai's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Changes and contact
Changes to this policy are dated at the top. Questions: info@katayama.dev.