Privacy Policy
Last updated: April 2, 2026
Exo is an open-source desktop email client built by Ankit Gupta. This privacy policy explains how Exo handles your data, including data obtained through Google APIs.
What data Exo accesses
When you connect a Gmail account, Exo requests access to your email messages, labels, and calendar events through the Gmail and Google Calendar APIs. This access is used solely to display and manage your email and calendar within the app.
How your data is used
Exo uses your Google user data exclusively to provide email client functionality:
- Reading, displaying, and organizing your email messages
- Sending, replying to, and drafting emails on your behalf
- Displaying calendar events in the sidebar
- AI-powered features (triage, drafts, sender lookup) that process email content locally or via the AI provider you configure (e.g. Anthropic API with your own API key)
Exo does not use your Google user data for advertising, market research, or any purpose unrelated to providing email client functionality.
How your data is stored
Exo is a desktop application. Your email data is stored locally on your computer in the app's local database. Exo does not operate servers that store your email data. OAuth tokens used to access your Google account are stored locally on your device.
How your data is shared
Exo does not sell, rent, or share your Google user data with third parties. Your data may be sent to:
- Google APIs — to sync your email and calendar
- AI providers you configure — email content may be sent to AI APIs (such as the Anthropic API) using your own API key for features like triage and draft generation. You control which AI provider is used and must provide your own credentials.
No other third parties receive your Google user data.
Data retention and deletion
Your data is stored locally on your device. You can disconnect your Google account within the app at any time, which revokes Exo's access to your Google data.
Security
Exo stores OAuth tokens and local data using your operating system's standard security mechanisms. The application is open source, and its code can be reviewed at github.com/ankitvgupta/mail-app.
Google API Services User Data Policy
Exo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Changes to this policy
We may update this privacy policy from time to time. Changes will be reflected on this page with an updated date.
Contact
If you have questions about this privacy policy, please open an issue on GitHub.