Maila Privacy Policy

This Privacy Policy applies to Maila – AI Email Cleaner(the “App”), the Android app published by Nohaya (“we”, “us”, “our”; package name com.maila.app). It explains what data the App accesses, why, where it goes, and the choices you have. The Nohaya website is covered separately by our main Privacy Policy.

1. Summary

• Your emails stay in your Gmail or Outlook mailbox. We do not copy, store or log your email content on our servers.
• Your email content never leaves your device. Maila does not include AI features yet; before we add any, we will update this policy.
• We never use your email data for advertising, never sell it, and never use it to train AI models.
• The free version shows ads through Google AdMob. Premium removes all ads.
• Payments are handled by Razorpay (India) or Google Play (other countries). We never see your card, UPI or bank details.

2. Data the App Accesses

• Account details. When you connect a Gmail or Outlook account, we receive your name, email address and profile photo from Google or Microsoft to show which account is connected.
• Gmail data. With your permission the App uses the Gmail API scope gmail.modify (to list and read your messages, labels and attachments, and to archive, delete/trash, restore, star, label and mark messages read or unread when you ask it to). All Gmail data is processed on your device. The App never sends email on your behalf.
• Outlook data. With your permission the App uses Microsoft Graph (User.Read, Mail.ReadWrite) for the same read and clean-up actions on Outlook, Hotmail and Microsoft 365 mailboxes.
• Sign-in tokens. The access tokens Google and Microsoft issue are stored only on your device, encrypted with the Android Keystore. Your Gmail access token never leaves your device.

3. How We Use It

• To show your inbox, senders, subscriptions, attachments and storage statistics inside the App.
• To carry out the clean-up actions you choose (for example trashing all promotions older than a year).
• To confirm your Premium subscription for the account you are signed in with.

4. What Is Sent to Our Servers

No email content, subjects, senders or attachments are ever sent to our servers. The App talks to the Maila server at nohaya.com only for Premium status and payments: to know which account a subscription belongs to, it sends a proof of identity. For Google accounts this is a Google sign-in ID token, which only states your email address and cannot be used to access Gmail; our server checks it with Google. For Outlook accounts it is the Microsoft sign-in token, which our server uses only to ask Microsoft for your email address. We do not store these tokens; we keep a one-way (SHA-256) fingerprint for up to 10 minutes to avoid repeating the check.

The only personal data we store on our servers is your account email address, your subscription status and renewal date, and payment references from Razorpay or Google Play (subscription ID, payment ID, amount, currency and date).

5. Data Stored on Your Device

App settings, cleanup history, automation rules, smart folders, dismissed suggestions, your daily free cleanup count and ad-frequency counters are stored only on your phone. Reminders and digests are scheduled locally on your device; we do not run a push-notification server. Uninstalling the App or clearing its data deletes all of this.

6. Advertising

• The free version shows ads from Google AdMob: a banner on the main screens, an occasional full-screen ad after a cleanup finishes, and optional rewarded ads you can choose to watch for extra free cleanups.
• AdMob may collect your device's advertising ID, IP address, device information and ad interactions to serve and measure ads. See how Google uses information from apps that use its services.
• In the EEA, UK and Switzerland we ask for your consent before ads are personalised, using Google's consent form. If you decline, you still see ads, but they are not personalised.
• You can reset or delete your advertising ID at any time in Android Settings → Privacy → Ads (the name varies by device).
• Your email data is never shared with AdMob or used to choose ads.
• Premium subscribers see no ads at all.

7. Payments

Maila Premium is a monthly subscription: ₹49/month in India, billed by Razorpay, and $2.99/month elsewhere, billed by Google Play. Your card, UPI or bank details go directly to Razorpay or Google and are never shared with us. We only receive confirmation that a payment succeeded, the amount and a transaction reference. Refunds are covered by our Maila Refund & Cancellation Policy.

8. Service Providers

• Google: Google Sign-In and the Gmail API (your mailbox, accessed from your device), AdMob (ads), Google Play (payments outside India).
• Microsoft: Microsoft identity platform and Graph API (your Outlook mailbox).
• Razorpay: subscription payments in India.
• Amazon Web Services: hosts our server in the United States.

Maila does not currently use any AI provider. AI features are planned for a later version; we will update this policy, including which provider processes what data, before they are released.

We do not sell or rent your personal data, and we do not share it with anyone else.

9. Google API Limited Use Disclosure

Maila's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to provide the user-facing features described above. It is not used for advertising, is not sold, is not read by people (except with your explicit permission for support, for security purposes, or where required by law), and is not used to develop or train generalised AI models.

10. Retention and Deletion

• Disconnect an account in the App to delete its tokens from your device. You can also revoke access at myaccount.google.com/permissions (Google) or account.live.com/consent/Manage (Microsoft).
• Uninstall the App to delete everything stored on your device.
• Delete your server data (subscription and payment records) by emailing nohayasite@gmail.com from the account email. We delete it within 30 days, except payment records we must keep for tax and accounting law. Deleting your data does not cancel an active Google Play subscription; cancel it in the Play Store first. Step-by-step instructions: Delete your Maila data.

11. Security

All traffic between the App, our server and our providers is encrypted with HTTPS/TLS. Tokens on your device are encrypted with the Android Keystore, and our server is access-controlled. No system is 100% secure, but we keep the data we hold to the minimum described here.

12. Children

The App is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has used the App, contact us and we will delete any related data.

13. Changes to This Policy

When we update this policy we change the “Last updated” date above. Continuing to use the App after a change means you accept the updated policy.

14. Contact Us

Questions or requests about your data: nohayasite@gmail.com.