Get stuff done
Last updated October 23, 2026

Privacy Policy

Privacy policies are usually written so nobody reads them. This one explains what Killer Email sees, what it keeps and what it will never do. Your inbox is personal. We treat it that way.

Who we are

Killer Email is operated by Jozi Firecracker Factory LLC, an Oregon company ("Killer Email", "we", "us"). Questions and privacy requests go to apps@jozi.co.

The short version

  • Killer Email does not read full bodies for sorting. Add to calendar reads the body of that single email, has the AI check the first 4,000 characters for event details, expanding only if those details are missing, with a hard maximum of 8,000 characters, and does not store the body. Gmail extracts text from plain text or HTML; Outlook requests text, but the response may contain HTML. It never reads attachments.
  • Killer Email searches unread and starred Gmail inbox mail, plus unread and flagged messages in the Outlook Inbox folder, while you have the app open and syncing. It does not read mail in the background while you are away.
  • Quarantine is a view inside Killer Email. It never moves or deletes mail in Gmail or Outlook, or changes read status just by quarantining it.
  • We do not sell your data, use it for advertising or use it to train AI models.
  • You can disconnect one Gmail or Outlook account or delete your whole Killer Email account.

What we collect

Your Killer Email account

  • Your email address, account identifier and authentication information needed to sign you in.
  • Whether you completed the required two-factor authentication check.

Gmail data

Killer Email reads unread inbox mail plus mail you have starred in Gmail. When a Gmail account is first connected, it requests unread and starred inbox mail from the previous 30 days. Later syncs request new unread mail and newly starred mail since the last completed sync. The app also checks periodically while your desk is open; it does not run a background mailbox reader while you are away.

For each matching message, Google returns the message and thread identifiers; sender name and address; subject and date; Gmail's preview snippet; Gmail labels; and the Reply-To and Authentication-Results headers.

We store the message and thread identifiers, sender, subject, date, preview snippet and the resulting unverified-sender flag. Gmail labels are used only for the Promotions, Social and Spam pre-sort. Reply-To and Authentication-Results are used only to calculate the warning. Those labels and headers are not stored. Killer Email does not read the full text of your emails. The one exception is the Add to calendar button: when you press it, the app reads the plain text of that single email only (at most 8,000 characters). The AI checks the first 4,000 and expands only if event details are missing, and it never stores that text. It never reads attachments.

Outlook data and permissions

Microsoft Graph returns message and conversation identifiers, sender name and address, subject, received date, bodyPreview, read status, flag status and Focused Inbox classification (Focused or Other). Killer Email stores the identifiers, sender, subject, received date, preview (up to 500 characters), flagged status and sorting results. The Focused Inbox classification is used only for the free pre-sort and is not stored: Outlook mail that Microsoft's Focused Inbox files under Other (not Focused) is quarantined without an AI action, unless you've kept mail from that sender before; flagged Outlook mail is never quarantined this way. If an account doesn't return a Focused Inbox classification, its mail goes to the AI as before. Unlike Gmail, it does not receive sender-authentication headers, so the authenticity check does not apply. Killer Email searches unread and flagged messages in the Inbox folder only; Junk Email, Deleted Items, Archive and other folders are never read. First scans look back 30 days; later syncs use the last completed sync time.

Microsoft permissions requested are openid, profile, email, offline_access, User.Read, Mail.Read, Mail.ReadWrite and Calendars.ReadWrite. User.Read identifies the connected account; offline_access lets the connection service refresh access. Mail.ReadWrite does not grant Mail.Send. Server-side allowlists limit the broader permissions to the reads and writes described here. Sending, forwarding, moving, deleting, category changes and attachment access are blocked.

Gmail drafts are saved after approval and can include the original thread identifier. Outlook drafts are new text-only drafts saved to the originating account, not threaded reply drafts. Neither is sent by Killer Email. Done, Archive and confirmed Clear Quarantine mark mail read; Done also removes a Gmail star or requests clearing an Outlook flag.

Calendar data

  • Your connected Google or Microsoft account address, used to label the calendar connection.
  • If that address is unavailable, the app may ask Google for your primary calendar identifier solely to label the connection.
  • We do not list, read, edit or delete existing events.
  • When you confirm a proposal, we send its title, description, start and end to the primary Google calendar or default Outlook calendar of your selected connection, with any all-day setting. No guests are included. The email can come from either provider; the destination follows your calendar selection. Outlook mail and calendar share one Microsoft connection. If neither a selected calendar nor a Google calendar connection exists, a new Outlook connection becomes the destination; it does not replace an existing selection.

Data Killer Email creates

  • The Today, Next Week or Later bucket, quarantine decision and reason, one-line action, suggested actions, confidence and sender-warning flag.
  • Your Done, Archive, Rescue and calendar-selection choices.
  • Connection and sync status, including whether the one-time 30-day scan has run.
  • Monthly AI usage totals and your plan limits.

Activity log

Every Gmail, Outlook or calendar change records the time, action, connected account, message subject and item count. The logged actions are marking mail read, saving a Gmail or Outlook draft and creating a calendar event. This log is visible only to you.

If you add a personal assistant's email address, pressing Delegate has the AI write a short task brief from that email's sender, subject and preview. Killer Email emails the brief straight to that assistant address from its own address (killyouremail.com), not from your Gmail or Outlook account, with replies directed to you. The brief includes the original email's sender, subject, date and preview. Nothing is ever sent from your Gmail or Outlook account, and the address is erased when you remove it.

Billing

Stripe handles payment and card details. We store Stripe customer and subscription identifiers, your product and price, subscription status, billing period and cancellation status. Killer Email does not store your card number.

Security and technical data

  • Short-lived rate-limit counters keyed by your account identifier and IP address.
  • One-time Google connection tickets and pending Microsoft connection slots tied to your account.
  • Operational errors needed to diagnose failures. Our logging calls avoid message content, subjects, sender addresses, draft text, OAuth tokens and connection keys.

How we use your data

Only to provide features you request: sign you in, connect accounts, sort unread mail, show lists and warnings, prepare drafts and event proposals, save an approved draft or event, mark mail read after your action, enforce plan limits, process billing, prevent abuse, run the service and provide support.

What we never do

  • Sell or rent your data.
  • Use your email for advertising, ad targeting, marketing profiles or data brokers.
  • Use your email to train generalized AI models.
  • Send, trash, delete, move or forward Gmail or Outlook mail, add Gmail labels or Outlook categories, or change mailbox settings. Marking read and removing a Gmail star or requesting Outlook flag clearing are the explicit exceptions to mailbox changes.
  • Let people read your email data, except when you request help with a specific issue and give permission, when necessary for security, or when legally required.

How AI handles your data

Killer Email uses OpenAI models through Lovable's AI gateway. Sorting Gmail and Outlook mail uses OpenAI's GPT-6 Luna model; reply drafts, delegation briefs and calendar reading use OpenAI's GPT-6 Astra model. For sorting Gmail and Outlook mail, it receives the sender name and address, subject and the provider's preview trimmed to 240 characters. For reply drafts and delegation briefs, it receives the sender name, subject, the trimmed preview and Killer Email's own previous one-line action. When you press Add to calendar, it receives the subject, the trimmed preview, the one-line action and initially the first 4,000 characters of that one email's body. Only if event details are missing does it receive more, up to an absolute maximum of 8,000 characters. Each AI pass counts toward your AI allowance. Gmail text is extracted from plain text or HTML; Outlook requests text, but the response may contain HTML. This body content is not stored by Killer Email. The models never receive attachments. Requests are sent with storage disabled (store: false).

OpenAI is not permitted to use this data to train generalized models. Under OpenAI's API policies, limited request data may still be retained briefly for abuse and security monitoring. We do not claim zero retention.

The model has no tools and cannot act. It returns suggestions in a strict format. Killer Email checks every suggestion in code before you see it.

Who helps us run Killer Email

  • Google — Gmail and Google Calendar connections.
  • Microsoft — Outlook mail and calendar connections.
  • Lovable — hosting, database, authentication emails, error reporting, Microsoft OAuth token management and connection service, the AI gateway and the Stripe gateway connection.
  • OpenAI — the AI models used for sorting, reply drafts and event proposals.
  • Stripe — subscriptions, payments, fraud checks and billing records. Stripe does not receive Gmail or Outlook email content.
  • Cloudflare — Turnstile bot checks during sign-up.

We transfer data to these providers only as needed to deliver the features above, protect the service or comply with law.

Google tokens and Microsoft connection keys

Google access and refresh tokens are stored by Killer Email, encrypted with AES-256-GCM. The encryption key exists only in the server's private configuration — never in the database. Tokens are decrypted only on the server, only to make a request you asked for, and are never exposed to the browser or written to logs.

Microsoft access and refresh tokens are managed by Lovable's connection service, rather than stored directly by Killer Email. Killer Email stores the Microsoft connection key encrypted with AES-256-GCM; it is server-only and is not exposed to the browser or logs.

How long we keep data

  • Open action items stay while their Gmail or Outlook account remains connected.
  • Thirty days after an item is Done, Archived or put in Quarantine, its preview, action line and quarantine reason are erased.
  • Ninety days after an item is Done, Archived or put in Quarantine, the remaining item record is deleted.
  • Items still open (not handled) have their preview, action line and quarantine reason erased once the email is more than 90 days old.
  • Unfinished Google connection attempts are deleted after one day. Pending Microsoft slots expire after 30 minutes.
  • Activity entries are deleted after 365 days, or sooner when you disconnect the account they describe or delete your account.
  • Rate-limit counters and expired Google connection tickets are deleted after one day. Tickets can be used only once and expire for use after 15 minutes.
  • Stripe may keep billing records as long as payment and tax law requires.
  • Infrastructure and error logs follow Lovable's hosting retention practices. We do not promise a separate fixed period for those provider logs.

Disconnecting and deleting

  • Disconnecting Gmail erases its mail records, sender history, scan record, activity entries and encrypted tokens, and revokes the access at Google.
  • Disconnecting Google Calendar erases its connection and clears it as your selected calendar. Removing Outlook also removes its shared calendar connection and clears its selection.
  • If Gmail or Outlook revocation cannot be confirmed after retries, the failure is logged and alerted, the stored token is destroyed anyway, and the app tells you to check Google account permissions.
  • Disconnecting Outlook erases its mail records, sender history, scan record, activity entries and encrypted connection key, and revokes access by deleting the connection through Lovable's connection service, retrying with backoff, then confirming the old key is refused, so no Microsoft token remains usable by Killer Email. Microsoft may still list the app's consent; review Microsoft app permissions to remove consent separately; work or school permissions may be managed by your organization.
  • Cancelling your plan erases your Killer Email account when the paid period ends: every Gmail and Outlook connection is revoked and verified as above, then all user-linked application data and the login are erased. A failed payment does not trigger this.
  • Deleting your Killer Email account first cancels an active subscription, then revokes every connection the same way and erases all user-linked application data and the login. If billing cancellation fails, deletion stops and tells you to try again.
  • Quarantine and account deletion never delete Gmail or Outlook messages or existing Calendar events.

Your choices and rights

Ask to access, correct, delete or receive a portable copy of personal data we hold by emailing apps@jozi.co. We aim to respond within 30 days, and sooner where law requires. You can also disconnect an account or delete Killer Email from inside the app.

If there is a breach

If we confirm a breach affecting your personal data, we will notify affected users without undue delay, with a target of 72 hours after confirmation, and notify regulators when required.

Children

Killer Email is not intended for anyone under 16, and we do not knowingly collect data from anyone under 16.

Google API Services and Limited Use

Killer Email's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

  • Google user data is used only for user-facing features visible in Killer Email.
  • It is transferred only to the providers listed above as needed to provide those features, protect security or comply with law.
  • It is never sold, used for advertising or used to train generalized AI models.
  • People do not read it except with your consent for support, when necessary for security, or when legally required.

Security

Read how these limits are enforced on our Security page.

Changes to this policy

We will update the date above and notify you in the app or by email before a material change takes effect.

Who built this

Killer Email is made by Jozi Firecracker Factory LLC, a design and product studio based in Portland, Oregon. For almost 20 years we've designed and built digital products for some of the most security-conscious companies on earth, including Microsoft, Oracle, IBM, BMW and New Relic. In that world, privacy reviews, security audits and "what happens if this goes wrong?" are part of every design decision, not an afterthought.

For most of that time, studios like ours made the websites, campaigns and digital experiences that pointed people toward someone else's product. AI has changed that. A small, senior team can now design, build and run real software of its own. So we're taking the craft we spent two decades applying for enterprise clients and pointing it at products of our own: tools that are delightful to use, honest about how they work, and held to the same security standards our biggest clients demand. We built Killer Email for our own inboxes first, which is the best reason we know to get this right.

Contact

apps@jozi.co

Your email is none of our business. We just clean it up.