Supermail

Privacy Policy

Last updated 9/29/26

The short version

  • Supermail is an app on your Mac. It downloads your mail straight from Gmail and keeps it on your Mac. There is no Supermail server.
  • Supermail uses your Gmail data only to show, search, organize, and send your mail.
  • We never sell your data, use it for ads, or use it to train AI models.
  • A few features send limited data elsewhere, and only when you use them. Each one is listed below.

Who we are

Supermail is made by Finished Goods International LLC ("Finished Goods," "we," "us"). This policy covers the Supermail app for Mac and this website, supermail.email. Questions go to luke@finishedgoods.com.

What Supermail can do in your Google account

You sign in on Google's own page in your web browser, so Supermail never sees your Google password. Supermail asks Google for one permission, "Read, compose, and send emails from your Gmail account" (the gmail.modify scope). With it, Supermail:

  • Reads your email, labels, and attachments, and your Gmail display name and signature.
  • Makes the changes you ask for, like marking email read, done, starred, labeled, spam, or trash, and snoozing it with Remind me.
  • Sends email you write, and searches Gmail when you search.

Supermail can't permanently delete email, and it doesn't access your Google Drive, Calendar, or Contacts.

What stays on your Mac

Supermail keeps your mail on your Mac so it's fast and works offline:

WhereWhat
~/Library/Application Support/Supermail Your email (including its full text), labels, contacts, reminders, a search index, unsent drafts, pictures from emails, attachment previews, and your Google sign-in tokens. Only your Mac user account can open this folder.
~/Library/Caches/com.finishedgoods.supermail Temporary copies of downloads from Gmail and of pictures in emails.
~/Library/Logs/Supermail A log of what the app did, like sync progress and errors. It can include your email addresses, Gmail message IDs, sender domains, and attachment file names. It never includes the text of your emails.
~/Downloads Attachments you choose to open.

Anyone who can sign in to your Mac user account could read these files, so protect your Mac with a password and FileVault.

Where your data goes

Supermail doesn't include analytics, advertising, or tracking code. It connects only to:

Google

To sync, search, change, and send your mail, over an encrypted connection.

The senders of your email

Supermail shows the pictures in an email by loading them from the sender's servers. That can let a sender know you opened their email, and see your IP address. Links you click open in your web browser.

Unsubscribe (⌘U), only when you use it

Supermail uses the unsubscribe method the sender provides: a one-click unsubscribe request sent to the sender's web address, an unsubscribe email sent from your Gmail, or the sender's unsubscribe page opened in your browser.

GitHub, for Finished Goods team members only

Supermail's code is private on GitHub, and only people with access to it get app updates. If you connect GitHub in Supermail, it checks GitHub for updates about once an hour using your own GitHub sign-in. If your Mac is signed in to GitHub with access to Supermail's code, then after Supermail quits unexpectedly it files a crash report there. The report has the crash details, app and macOS versions, and the last 80 lines of the log, with email addresses shortened to their domain. A bug report you send from the app also includes your note, the number of accounts you use, and the last 200 lines of the log. These reports are visible to people with access to Supermail's code.

Krinkov, for Finished Goods staff only

Krinkov is Finished Goods' own business app. Supermail talks to Krinkov only after you connect a Krinkov key, which only Finished Goods staff can get, and only for the work account that key belongs to. It never does this for a personal Gmail account. Once connected, Supermail sends Krinkov:

  • Automatically: the sender address of each email in your inbox and any order numbers in its subject, to show order stages in the inbox; and for an email you open, its subject, the addresses of people outside your company, and order numbers found in it, to show the customer panel. Krinkov uses these to find matching customers and orders and doesn't save them.
  • When you press T: the sender's address, the subject, the customer name, and the text of up to six recent emails in the conversation. Krinkov uses Anthropic's Claude to draft the task title and summary, and doesn't save that text.
  • When you save a task: the task, including its notes (the sender, the date, and a link back to the email in Gmail), and the email's attachments unless you remove them. Saved tasks are kept in Krinkov and visible to Finished Goods staff, as described in Krinkov's privacy policy.

Anthropic, only when you use the Claude chat (⌘J)

The Claude chat runs the Claude Code app installed on your Mac. When you send a chat message, Supermail gives Claude Code your name and address, the conversation you're reading (names and addresses, dates, subject, attachment names, and the text of the emails), your reply draft, the chat so far, and the personal instructions in your Claude Code settings. In a work account connected to Krinkov, it also includes Krinkov's facts about that customer. Claude Code sends this to Anthropic under your own Anthropic account, and Anthropic's privacy policy applies. Nothing is sent until you send a message, and Supermail doesn't save your chats.

How we use Gmail data

  • Supermail uses data from your Google account only to provide the features you see in the app: showing, searching, organizing, and sending your mail, reminders, and, for Finished Goods staff, Krinkov's customer panel and tasks.
  • We don't sell Gmail data or transfer it to anyone except as described above, to provide those features, for security, or when the law requires it.
  • We don't use Gmail data for advertising, and we don't give it to advertisers or data brokers.
  • We don't use Gmail data to create, train, or improve AI or machine-learning models.
  • No one at Finished Goods reads your email, unless you ask us to (for example, to fix a problem), for security, or when the law requires it.

Supermail's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Removing your data

Everything Supermail stores stays on your Mac until you delete it. To remove it all:

  • Remove Supermail's access to Gmail in your Google Account settings.
  • Quit Supermail and delete the folders listed under "What stays on your Mac", plus ~/Library/WebKit/com.finishedgoods.supermail and ~/Library/HTTPStorages/com.finishedgoods.supermail, then delete the app. Supermail doesn't have a sign-out button yet.
  • To delete Krinkov tasks, crash reports, or anything else we hold, email luke@finishedgoods.com and we'll remove it.

This website

supermail.email has no cookies, analytics, or scripts. Our host, Vercel, keeps standard server logs (such as IP address, browser type, and the page requested) to run and protect the site.

Children

Supermail isn't meant for children under 13, and we don't knowingly collect their data.

Changes

We'll update this policy when Supermail changes what it does with data. The date at the top shows the latest version.

Contact

Questions or requests about your data: luke@finishedgoods.com.