FlintPrivacy policy
Flint is a desktop mail client made by Xanom. It runs on your computer. There is no Flint account, and Flint has no server that receives your mail.
Your mail stays on your computer
Flint connects directly from your computer to your mail provider (for example Gmail or iCloud) over IMAP and SMTP. Messages, attachments, contacts, drafts and settings are stored in a local database on your computer. Passwords and sign-in tokens are encrypted with the macOS Keychain. Flint does not copy any of this to Xanom or anyone else.
Flint does not include analytics, advertising or crash-reporting software.
Google user data
When you sign in with Google, Flint asks for access to Gmail (https://mail.google.com/) and your basic profile (name and email address). Flint uses this access only to show, search, send and organize your mail inside the app on your computer, at your request.
- Your Google data is stored only on your computer.
- It is not sent to Xanom servers, sold, or used for advertising.
- No person at Xanom reads it.
- It is not used to train AI models.
- It is shared with an AI provider only when you use an AI feature, as described below.
Flint's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can remove Flint's access at any time in your Google account permissions. Removing an account in Flint deletes its local mail and credentials.
AI features
AI features are off until you connect your own ChatGPT or Grok account. When you ask for a summary, a reply, a rewrite, a translation or an answer about your inbox, Flint sends the text needed for that request (for example the thread you are reading) from your computer to the provider you connected, using your account with them. That provider's own privacy terms apply. Xanom does not receive these requests.
Read receipts
If you leave read receipts on, Flint adds a small invisible image to each copy of a message you send, with a random code for each recipient. When a recipient's mail app loads that image, the Flint receipts service (flintr.xanom.co, run by Xanom on Cloudflare) records:
- the time of the request,
- the mail app and device type, read from the user agent,
- city and country as estimated by Cloudflare,
- a keyed one-way hash of the IP address, used to filter out your own opens and repeat loads. The IP address itself is not stored.
To tell real opens apart from Apple Mail Privacy Protection and security scanners, the service also looks at the network the request comes from at the moment it arrives. The network name is not stored.
The service never receives the message, its subject or any email address. Records are deleted after 180 days. You can turn receipts off for one message in the composer or for all mail in Settings, and you can point Flint at a receipts service you run yourself.
Local agents
Flint can let programs on your computer, such as coding agents, use your mail through the flint command. This works only on your computer, through a private socket protected by a token file. You can turn it off, limit what agents may do, and require your approval before an agent sends mail. Every agent action is listed in Agent Activity.
Children
Flint is not directed at children under 13.
Changes and contact
If this policy changes, the new version will be posted here with a new effective date. Questions go to neel@xanom.co.