Your email and Google account
Claire is an email client for Gmail on Mac, iPhone, and web. It connects to your Google account to read, organize, and send mail, and to show your calendar and contacts. Each permission is explained on the Google permissions page.
Your messages stay in Gmail. Claire fetches them directly from Google to your device. Claire does not keep a server-side copy of your mailbox.
On your device
- Sign-in tokens are protected by the system keychain on macOS, stored in the iOS keychain on iPhone, and kept in session storage in the browser. The web version keeps no long-lived refresh token. Notifications use a separate encrypted server-side credential, described below.
- Recent message headers, including the sender, subject, and Gmail preview, are cached on Mac and iPhone to show your inbox at launch. This cache does not contain message bodies and is removed when you sign out. The web app does not keep this cache.
- Downloaded message content is cached separately on Mac and iPhone so recent and opened emails can reopen quickly. This encrypted cache is limited to 250 messages or 32 MiB across accounts. Entries expire after 14 days without a cache update and are cleaned up when the app next runs. Signing out removes that account's cached content. The web app does not keep this persistent body cache.
- Preferences and settings are saved locally so Claire remembers how you use it.
Connected services
Notifications and settings sync
Claire uses Cloudflare to deliver notifications and sync to-do, snooze, and reminder timing between devices. The notification service stores an encrypted Google refresh token and a Gmail sync marker for each account. It fetches notification metadata, including the sender, subject, message identifiers, and unread count, without retaining message bodies. Contact-photo URLs may be cached for up to seven days for iPhone notifications.
The settings sync stores message identifiers, timestamps and sender routing rules, rather than email content. Claire never stores a copy of your mailbox, message bodies or attachments on its servers.
You can delete everything the service holds for an account yourself: Settings → Accounts → Server data → Delete server data. Signing out on the last device also removes the notification credential; the synced settings are kept so they restore on your next sign-in, until you delete them.
Optional AI features
AI features require your own provider key, or a local Ollama setup on Mac. When you use an AI feature or enable a daily briefing, Claire sends the relevant message text or briefing details to your configured provider. This can include subjects, senders, body excerpts, and event titles. You choose the provider in Settings: Groq, Anthropic (Claude), OpenAI, Google (Gemini) or xAI (Grok). Requests go directly from your device to that provider using your own key, and that provider's API terms apply; Claire's servers never receive them. Your keys are stored on your device only. On Mac, you can use Ollama to process AI requests locally.
Sender images
Claire shows a logo or photo next to each sender, the way most mail apps do. Photos of people come from your Google contacts. For companies, your device looks up the logo the sender's domain publishes through BIMI (found through Cloudflare's DNS resolver and loaded from the address the sender publishes), and, only if you add your own key, logo.dev. iPhone notifications may load a company's logo from logo.dev. These lookups carry the sender's domain and your device's IP address, never your address or any message content. Anyone else gets a coloured initial drawn on your device. BIMI results are remembered on the device for a day.
Crash reports
Claire uses Sentry for diagnostics when enabled. Reports include stack traces and technical context. Before reports leave the device, email addresses are replaced with a placeholder, and user identity and request headers are removed. Message content is never intentionally included.
Optional usage sharing
Usage sharing is optional. Nothing is sent unless Share basic usage is on for this device. During the beta, the setup screen shows that switch on, with what is and is never shared, and you can turn it off there or any time in Settings. When it is on, Claire sends days used, Gmail connection status, triage use, and sync-failure signals to Cloudflare, together with the app version, platform, and a random installation ID. These events contain no email content, account address, message IDs, or contacts. Each event is sent at most once per day. Records expire after three months. Turning sharing off stops future events and removes the installation ID from this device; previously sent records expire on their retention schedule. This measures installations, not identified people, and does not track you across websites.
Early-access signup
When you join the waitlist, your email address is saved as a contact in Attio, our customer records provider, and Resend, our email provider, delivers your confirmation message. Those two receive your email address; no campaign or attribution details are collected, and the signup form sets no cookies. Joining the waitlist does not give Claire, Attio, or Resend access to your Gmail account.
The signup and information pages follow your device’s light or dark appearance. Their theme toggle applies only to the current page visit. To remove your waitlist details, email [email protected].
How we use your information
We do not sell or rent your data, show advertising in Claire, or use your email content to train AI models. Information is shared with the services described above to provide their stated functions.
Claire's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Your choices
You can stop using Claire, revoke its Google access, and request deletion of stored data. Follow the steps on Data deletion.
We update this page when the policy changes. Questions about your information? Contact [email protected].