Privacy Policy

Rock Mail for iPhone and Mac. Effective October 19, 2026.

In short

Rock Mail doesn't collect any data about you. The developer doesn't run servers that receive your mail, and the app contains no analytics, advertising or tracking. Your mail goes only between your device and the mail server you sign in to.

Your mail and account

When you sign in, Rock Mail connects directly to your mail server (using JMAP, or IMAP and SMTP) over an encrypted connection. Your messages, folders and drafts are stored on that server and cached on your device so the app works offline. Your password is kept in your device's keychain. Signing out deletes the cached mail from the device.

Contacts

If you allow access, Rock Mail reads your contacts on the device to show names and photos and to suggest addresses as you type. Contacts are never sent anywhere by Rock Mail. When you choose “Add to Contacts”, the contact is saved to your device's address book.

Settings shared between your devices

Some settings, such as the senders whose remote images you always load, are stored on your own mail server (as a small inactive Sieve script named “rockmail-settings”) so your other devices can use them. They stay on your server.

Remote content

Many emails contain images stored on the sender's servers, which can tell the sender when and roughly where a message was opened. Rock Mail doesn't load them unless you choose to, for that message or for a sender you allow, and it removes known tracking images.

Notifications

New-mail notifications are prepared on your device. On devices with Apple Intelligence, short summaries of new messages are written on the device by Apple's on-device model; your mail isn't sent anywhere for this.

Background notifications on iPhone are optional and work only if you enter a push relay address in Settings. Your mail server then sends a signal to that relay when something changes (it contains no message content), and the relay passes it to your device through Apple Push Notification service, using your device's push token. The relay is run by whoever you choose; Rock Mail's developer doesn't receive these signals unless you choose a relay the developer runs.

Children

Rock Mail isn't directed at children and doesn't knowingly collect information from anyone.

Changes

If this policy changes, the new version will be posted on this page with a new effective date.

Contact

Questions about privacy: open an issue at github.com/jridder/rockmail-site/issues.