Privacy Policy

What Quiet sees

Quiet connects to your Gmail with read and modify permissions so it can classify new messages and apply labels. The classifier reads only the sender address, subject line, and a short snippet of the body. Full message bodies are never copied off your Gmail account.

What Quiet stores

For each processed email, Quiet stores: the Gmail message ID, sender address, subject line, the classification decision, and a short reasoning string explaining why. This lets us build the daily digest and let you undo any mistakes. Message bodies are never stored.

Quiet also stores an encrypted copy of your Google refresh token so the app can continue sorting new mail on your behalf. If you disconnect, the token is deleted.

Who reads your email

Nobody on the Quiet team reads your email. Classification runs through Google Gemini in a stateless call. Google does not retain prompts sent through the Gemini API for free-tier usage.

The one exception: if you enable the optional safety contact feature, Quiet will send a short alert email to the contact you designate when a suspected scam is blocked. That alert includes the sender address and subject so your contact can verify it with you.

Third parties

Quiet uses these services to operate. Their privacy policies cover any data passed to them.

• Google — OAuth sign-in, Gmail API, Gemini classification
• Convex — encrypted application database
• Vercel — web hosting
• Resend — daily digest and caregiver alert email delivery

Disconnect anytime

Sign out from the Quiet dashboard and revoke the connection at Google permissions. Quiet immediately stops watching your inbox. Your stored metadata is deleted within seven days.

Contact

Privacy questions: open an issue at the Quiet repository or message Drey directly.