PHALANX

Privacy Policy

Last updated: August 6, 2026

Phalanx is a desktop email application that consolidates your Gmail and Microsoft Outlook accounts into one inbox. This policy explains what data Phalanx accesses, how it is used, and where it lives. The summary: Phalanx runs on your computer, your data stays on your computer, and we operate no servers that receive it.

What Phalanx accesses

When you connect an account, you grant Phalanx permission through Google's or Microsoft's official sign-in (OAuth). Depending on the permissions you approve, Phalanx accesses:

• Email messages (Gmail and/or Outlook): read messages to display your inbox; apply labels/folders and read state according to rules you create; send messages you compose, reply to, or schedule.
• Mailbox settings: read your existing Gmail filters and labels, and Outlook rules and categories, so Phalanx can import and display them.
• Calendar (read-only, Google): read events on your primary Google Calendar to display them in Phalanx's calendar view.
• Basic profile (email address, name): to label which account is which inside the app.

Where your data lives

• Your email is fetched directly from Google and Microsoft to your device over encrypted connections (HTTPS).
• Sign-in tokens, sender rules, settings, and the action journal are stored locally on your device (on macOS under ~/Library/Application Support/Phalanx; on Windows under %APPDATA%\Phalanx).
• Phalanx has no backend servers of its own. We cannot read your mail, and we do not receive, store, or process it.

Optional AI features (bring your own key)

Phalanx's AI features (message summaries, the inbox assistant) are off until you add an API key for an AI provider of your choice (e.g., Anthropic, OpenAI, or OpenRouter). When you actively use an AI feature, the relevant message content is sent from your device directly to that provider under your account and their privacy terms. Your key is stored locally on your device. Phalanx never routes AI requests through servers of ours.

Google API Services — Limited Use disclosure

Phalanx's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: Google user data is used only to provide the email and calendar features you see in the app; it is not used for advertising; it is not sold; it is not transferred to third parties except as necessary to provide features you initiate (such as an AI request you configure and trigger yourself) or as required by law; and humans do not read it.

What we collect about you

Nothing automatically. Phalanx currently includes no analytics, telemetry, or tracking. If you email support, we receive whatever you choose to send us.

Data sharing and selling

We do not sell, rent, or share your personal data or mailbox contents with third parties. Period.

Data retention and deletion

Because your data is stored only on your device, you control it entirely. Disconnecting an account inside Phalanx deletes its stored tokens. Uninstalling Phalanx and deleting its application-data folder (paths above) removes everything. You can also revoke Phalanx's access at any time from your Google Account permissions or Microsoft account permissions pages.

Security

All communication with Google and Microsoft uses HTTPS. Sign-in uses each provider's official OAuth flow in your own browser — Phalanx never sees or stores your password. Remote images in email are blocked by default to prevent tracking pixels.

Children

Phalanx is not directed at children under 13 and does not knowingly collect information from them.

Changes to this policy

If this policy changes materially, we will update this page and the date above.

Contact

Questions or requests: support@phalanxmail.com