ZeroInbox

Privacy Policy

Last updated: October 14, 2026

Introduction

ZeroInbox ("we", "our", or "the app") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application.

Information We Collect

1. Account Information

When you sign in with Google, we collect:

  • Email address
  • Name
  • Profile picture
  • Google account ID

2. Email Metadata

To help you manage email subscriptions, we access:

  • Email sender addresses and names
  • Email sender domains
  • Number of emails received from each sender
  • Dates when emails were last received
  • Unsubscribe links found in email headers

Important: We DO NOT permanently collect or store on external servers: email content or body text, email attachments, your contact lists, calendar data, or any other Google service data.

3. App Usage Data

We store information related to app features:

  • Clarity Points (gamification score)
  • Streak data (consecutive days of inbox cleaning)
  • Shields (gamification feature)
  • Badges earned
  • Subscriptions you've unsubscribed from
  • Timestamps of unsubscribe actions

4. Analytics and Crash Reports

We use Firebase Analytics (Google) to collect app usage events, such as:

  • Sign-in and sign-up
  • Onboarding progress
  • Inbox scans (counts, duration, success or failure)
  • Email actions you take (archive, delete, keep, unsubscribe), recorded as counts, along with how each was triggered (swipe, button, or keyboard)
  • Session completion stats
  • Levels, badges, and streaks
  • Settings changes
  • Interactions with share and rate prompts

Firebase also collects some data automatically: an app instance ID, device model, OS version, app version, approximate country or region (derived from your IP address), session and engagement timing, and install source (Google Play referrer).

What is never sent to analytics: email content, subjects, sender names or addresses, your email address, or any other message data. We do not collect the Android advertising ID (the AD_ID permission is removed from the app).

We use Sentry (Functional Software, Inc.) to receive crash and error reports when enabled. These include stack traces and device, OS, and app version information.

You can turn analytics off at any time. See "Your Rights and Choices" below.

How We Use Your Information

We use the collected information to:

  • Authenticate your account and maintain your session
  • Scan your Gmail for subscription emails
  • Display subscription statistics and help you prioritize which to unsubscribe from
  • Execute unsubscribe requests on your behalf
  • Track your progress with gamification features (points, streaks, badges)
  • Improve app functionality and user experience
  • Understand how the app is used so we can improve it and measure marketing reach (usage analytics)
  • Find and fix bugs (crash reports)

Third-Party Services

Google Gmail API

ZeroInbox uses the Gmail API to:

  • Read email metadata (sender information, dates, unsubscribe links)
  • Send unsubscribe emails on your behalf (for mailto: unsubscribe links)

Google API Services User Data Policy Compliance: ZeroInbox's use of information received from Gmail APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Analytics and crash reports never include Gmail data.

Google Sign-In

We use Google Sign-In for authentication. Your Google credentials are managed by Google and are never stored by ZeroInbox.

Firebase Analytics (Google)

Firebase Analytics receives the usage events and automatic device data described under "Analytics and Crash Reports" above. It is used to understand how the app is used and to measure marketing reach. It is not used for advertising, and the data is not sold. Gmail data is never sent to Firebase Analytics.

Sentry (Functional Software, Inc.)

Sentry receives crash and error reports (stack traces and device, OS, and app version information) when enabled. We use them only to fix bugs.

Data Storage and Security

Storage Location

Your data is stored locally on your device using SharedPreferences. Email metadata and content may be cached on-device to improve performance.

Security Measures

  • All data transmission occurs over encrypted connections (TLS/HTTPS)
  • OAuth tokens are managed securely through Google's authentication system
  • We do not store your Google password
  • Local data is stored in the app's private sandbox, accessible only to ZeroInbox

Data Retention

  • Account data: Retained while your account is active
  • Email metadata: Retained to track subscription history
  • Gamification data: Retained to maintain your progress

Your Rights and Choices

Access and Control

You have the right to:

  • View all data we've collected about you
  • Request deletion of your account and all associated data
  • Export your data in a portable format
  • Revoke Gmail access at any time through your Google Account settings
  • Turn off usage analytics at any time

Turning Off Analytics

Go to Settings and switch off "Share usage analytics" (on by default). Turning it off stops analytics collection on that device.

Revoking Access

You can revoke ZeroInbox's access to your Gmail at any time by:

  1. Visiting Google Account Security Settings
  2. Finding ZeroInbox in your connected apps
  3. Clicking "Remove Access"

Data Sharing

We DO NOT:

  • Sell your data to third parties
  • Share your data with advertisers
  • Use your data for advertising
  • Share email content with anyone

The only third parties that receive your data are:

  • Google: Receives OAuth authentication requests to verify your identity and authorize Gmail access through the Gmail API, and receives usage analytics through Firebase Analytics
  • Sentry (Functional Software, Inc.): Receives crash and error reports (stack traces, device, OS, and app version) so we can fix bugs
  • Unsubscribe endpoints: When you unsubscribe from a list, the sender's unsubscribe service receives your email address (this is standard unsubscribe behavior)

Children's Privacy

ZeroInbox is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

  • Updating the "Last Updated" date at the top of this policy
  • Displaying a notification in the app
  • Requiring re-acceptance of the updated policy

Google Play Data Safety

Data Collected:

  • Personal info: Name, email address
  • Photos: Profile picture
  • App activity: App interactions (collected by Firebase Analytics), in-app gamification data
  • App info and performance: Crash logs and diagnostics (collected by Sentry)
  • Device or other IDs: Firebase app instance ID
  • Messages: Email metadata (sender addresses, counts, dates)

Data Security: Data is encrypted in transit (TLS) and stored in the app's private sandbox on device.

Data Usage: App functionality (managing email subscriptions), analytics (understanding app usage and measuring marketing reach), and crash reporting and diagnostics (fixing bugs).

Data Sharing: No data sold to third parties. No data shared for advertising; the advertising ID is not collected. Shared with Google (sign-in and Gmail API, and Firebase Analytics usage data) and Sentry (crash reports). Users can turn off analytics at any time in Settings ("Share usage analytics").

Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), our legal basis for processing your personal data is:

  • Consent: You provide explicit consent when signing in with Google and authorizing Gmail access
  • Legitimate Interest: Processing necessary to provide the email subscription management service you've requested, and to understand and improve how the app is used and fix crashes (usage analytics and crash reports)

You may withdraw consent at any time by revoking Gmail access through your Google Account settings or by deleting your ZeroInbox account. You may object to usage analytics at any time by switching off "Share usage analytics" in Settings.

Data Protection Rights (GDPR)

If you are located in the EEA, you have the following rights:

  • Right to Access: Request copies of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your data
  • Right to Restrict Processing: Request limitation of data processing
  • Right to Data Portability: Request transfer of your data
  • Right to Object: Object to our processing of your data

To exercise these rights, please contact us at privacy@zeroinbox.app.

California Privacy Rights (CCPA)

California residents have the right to:

  • Know what personal information is collected
  • Know whether personal information is sold or disclosed
  • Say no to the sale of personal information (we do not sell data)
  • Access their personal information
  • Request deletion of personal information
  • Not be discriminated against for exercising privacy rights

To exercise these rights, please contact us at privacy@zeroinbox.app.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Back to ZeroInbox