Privacy policy

Last updated: 22 October 2026

Mailsky is an email app and website made by Soft-KS ("we"), Prishtina, Kosovo. Mailboxes used with Mailsky are hosted on our mail platform and sold by our hosting partner EltaHost. This policy explains what the app and the website do with your data. In short: your email stays on your mail server, we don’t show ads, we don’t sell data and we don’t track you.

1. Your login

You sign in with your email address and mailbox password (or an app password). They are stored only on your phone, in its encrypted storage (Android Keystore / iOS Keychain), and are used to connect to your mail server. Some features (settings, delivery status, team inbox, calendar, admin tools) send them over an encrypted connection to the mail server, which checks them on every request and doesn’t store them.

2. Your email, calendar and contacts

The app reads and sends your email directly with your mail server (mail.streamhunt.net) over encrypted connections (IMAP/SMTP with TLS, HTTPS). Your calendar and contacts are read from and saved to the same server. Mailsky has no separate cloud copy of your mailbox.

So the app opens instantly and works without a connection, it keeps a copy of your recent message lists and opened emails in its private storage on your phone. Other apps can’t read it. Old copies are removed automatically, and signing out of an account or uninstalling the app deletes them.

When you schedule or snooze an email, the message (or its ID) is stored on the mail server until the chosen time, then deleted.

3. Notifications

To tell you about new mail, the app registers your device with our notification service on the mail server. We store your email address, your chosen app language and a device token from Google Firebase Cloud Messaging (Android) or Apple Push Notification service (iPhone). When an email arrives, the notification (sender name and subject) is delivered through Google’s or Apple’s push service. You can turn notifications off in the app or in your phone’s settings; signing out of an account removes its registration.

4. Security alerts

To warn you about sign-ins from new places, the mail server checks the IP addresses that sign in to your mailbox (from its own login log). To turn an IP address into an approximate location (country and city), the IP address alone is looked up with ipinfo.io, or api.country.is as a fallback. We remember which countries your mailbox has signed in from, so we only alert you about new ones; this list is deleted with your mailbox.

5. Team inboxes and admin tools

If your company uses team inboxes, the assignee, status and internal notes you add to an email are stored on the mail server and visible to the members of that team. Mailbox admins can create, change, suspend and offboard mailboxes of their own domain; these actions are carried out on the mail server and limited to that domain.

6. AI assistant (optional)

The AI assistant only works when you tap it (summarize, translate, write a reply, improve your text). The text of that email or draft is then sent through our server to Anthropic (the maker of Claude) to produce the answer. Anthropic doesn’t use this data to train its models. We keep only a daily usage count per mailbox, not the text. If you don’t use the assistant, nothing is sent.

7. Personal @mailsky.app addresses

When you create a personal address on mailsky.app we store your name, the address, your recovery email, your language, the time and the IP address of the sign-up, and which plan you have. We use them to run the account, to send you sign-up and password-reset codes and important account notices, and to stop abuse (for example several accounts from one connection). We don’t send marketing to your recovery email. The codes are kept only as encrypted fingerprints and expire after 15 minutes. This data is deleted when you delete the address; the name itself (without any other data) is kept for one year so nobody else can take it over.

8. This website

mailsky.app uses no analytics, no advertising and no third-party trackers. Fonts are served from our own server. The only cookie is lang, which remembers the language you picked. The pricing page loads current prices from eltahost.com; that request carries no personal data. Our web server keeps standard access logs (IP address, page, time, browser) for up to 30 days for security.

9. What we do not do

• No advertising and no ad IDs.
• No analytics or tracking SDKs in the app.
• We don’t sell or share your data with anyone except the service providers named above, which are needed to run the features.

10. Data on the mail server

Your mailbox itself (email, calendar, contacts) is hosted under your agreement with EltaHost. The mail server keeps delivery logs (who sent what to whom, delivery result) so it can work and show delivery status; these are kept for up to 30 days.

11. Your rights and deleting your data

You can ask us for a copy of the data we hold about you, or ask us to correct or delete it, by writing to privacy@mailsky.app. See Delete your data for the quickest way. Removing an account from the app deletes its stored login, saved copies and notification registration on that phone.

12. Children

Mailsky is a business app and is not meant for children under 16.

13. Changes and contact

If this policy changes, we update this page and the date above, and for important changes we tell you in the app. Questions: privacy@mailsky.app.

Soft-KS, Prishtina, Kosovo.