Privacy Policy

Matou does not require a Matou account and does not route your email through a Gx2 Studio mail server. The app contains no advertising or third-party analytics SDKs.

This notice describes current development builds and will be updated if the released product handles data differently.

Account credentials and S/MIME identities are stored in macOS Keychain. Mail data stays inside Matou’s sandboxed container. Matou-managed OpenPGP keys are kept in an encrypted local vault, and sensitive draft and outbox attachments are protected with AES-GCM.

Matou connects to the IMAP and SMTP services you configure. OAuth sign-in may open pages operated by your email provider. OpenPGP key discovery may contact a Web Key Directory or keyserver.

These services process data under their own terms and privacy policies. Matou keeps private keys on your Mac.

The optional GPG Connector lets Matou request cryptographic operations from an existing GnuPG installation on the same Mac. Communication is local and authenticated. The connector is not required for Matou-managed OpenPGP keys or S/MIME.

matou.app is a static website. It has no user accounts, advertising pixels, analytics scripts, or marketing forms. Hosting infrastructure may process request data such as an IP address, browser type, requested path, and timestamp for delivery, security, and reliability.

If you choose to share diagnostics through macOS or the Mac App Store, Apple may provide crash or performance information according to your system settings and Apple’s policies. Matou does not use a third-party analytics or crash-reporting SDK.