Privacy Policy

This policy covers the CatchNone app for iPhone, iPad and Mac (“the app”) and the service behind @catchnone.com addresses (“the service”), both provided by Nikodem Bernat (“I”, “me”). Contact: me@nikodembernat.com.

CatchNone has no ads, no analytics, no tracking and no advertising identifier. It does not use your location. Nothing about you is sold or shared with data brokers.

What the app does with your data depends on which kind of address you use.

Aliases on your own domain

When you connect a mailbox on a domain you own, the app talks to your mail provider directly from your device, over IMAP or JMAP. That mail never passes through my servers.

• Mail is downloaded read-only and stored only on your device. The app never marks, moves or deletes anything on your provider’s server.
• Mailbox passwords and tokens are stored in your device’s Keychain. They are not synced and never leave the device except to sign in to your provider.
• Aliases, domains and settings sync between your devices through your own iCloud account (Apple’s CloudKit private database). I cannot read that data. Apple’s privacy policy applies to it.

@catchnone.com addresses (Premium)

To receive mail at @catchnone.com, the service has to receive and store it for you. It runs on Cloudflare (Workers, D1 database and R2 storage), which processes this data on my behalf.

What the service stores:

• An account. The app creates a user ID and a secret key on your device and keeps the key in your iCloud Keychain; the service stores the ID and a hash of the key, never the key itself. There is no sign-up with an email address or password. The account also holds when it was created and when the app last signed in, your RevenueCat app user ID (see below), whether Premium is active, until when and whether it comes from a real or a test purchase, and usage counters for the limits below.
• Your @catchnone.com aliases: each address, the name you gave it, whether it is switched on, and when it was created, changed and last received mail.
• Mail sent to those addresses: the sender, recipient, subject, a short preview, and the full original message including attachments.
• A change log of alias and message updates, so your other devices can catch up. It holds IDs and times only, and is kept for 90 days.
• Subscription events that RevenueCat reports (the event type and your user ID), kept for 30 days.
• Operational logs that record deliveries, rejections and errors, with the alias address, your user ID and message IDs, but not message contents or who sent a message. The service uses your device’s IP address to limit abuse. It never writes the address to its database or to these logs, though Cloudflare may record it with them. After a failed sign-in, the address is kept for one minute by the Cloudflare location that handled the request, so that further sign-ins from it can be refused. Cloudflare keeps these logs for no longer than 7 days.

How long it is kept:

• Each message is deleted 30 days after it arrives, by a clean-up that runs every night. If you delete it in the app first, the full message is deleted straight away (or in the next nightly clean-up, if that fails) and the rest (sender, subject, preview) at the 30-day mark.
• Mail over a limit is not stored. Messages larger than 25 MB are refused by the mail server and never reach the service. Mail over the daily or storage limit is refused for the time being, and the sender’s mail server normally tries again later. Mail that arrives too fast in a short period is discarded on arrival. The current limits per account are 500 incoming messages a day, at most 250 of them to any one address, and 1 GB of stored mail.
• While Premium is not active, mail sent to your @catchnone.com addresses is discarded on arrival.
• When you delete an alias, the name you gave it is erased straight away. Its address stays associated with your account and is kept on a list of retired addresses, so that it is never given to anyone else.
• Your account and aliases are kept until you delete them. In the app, go to Settings → About → Delete @catchnone.com account: mail to your addresses stops at once, and the account, its aliases and all stored mail are deleted, usually within a day. If you can’t use the app, email me@nikodembernat.com with your User ID (Settings → About in the app). Your User ID alone does not prove the account is yours, so I will reply with a short code and ask you to rename one of your @catchnone.com aliases to it in the app; nothing is deleted until that is done. I will then delete the account, its aliases and all stored mail within 30 days. Either way, the User ID and the aliases’ addresses are kept, without the aliases’ names, your mail or your subscription, so that none of them is ever given to anyone else. Deleting the account does not cancel your App Store subscription.
• Deleted records (your account, aliases, and each message’s sender, subject and preview) stay recoverable in Cloudflare’s database backups (D1 Time Travel) for up to 30 days after they are deleted. Deleted message files are not.

The app downloads your @catchnone.com mail to your device, where it stays until you delete it.

Purchases

Subscriptions are sold by Apple. I use RevenueCat to check whether your subscription is active. RevenueCat receives an anonymous app user ID generated by its SDK and the App Store transaction records for your subscription. It does not receive your name, email address or payment details. RevenueCat’s privacy policy applies: https://www.revenuecat.com/privacy

Actions you start

Some actions connect your device to other servers, only when you choose them:

• Loading remote images in a message fetches them from the sender’s servers, which can tell the sender that the message was opened. Remote images are blocked until you load them.
• Unsubscribe sends the mailing list’s unsubscribe request to the sender.
• Reply and Forward open a draft in your own mail app; CatchNone never sends mail.

What I use data for

Only to run the app and the service: to receive, store and show your mail, to enforce the plan limits, and to know whether you have Premium. I do not use your data for advertising, profiling or training, and I do not read your mail. I will disclose data only when the law requires it.

If you are in the EU, UK or a similar jurisdiction, the legal basis is performance of the contract with you (providing the service you subscribed to). You can ask me for a copy of the data the service holds about you, to correct it, or to delete it, by emailing me@nikodembernat.com; I will first confirm that the account is yours, as described above. You can also export your aliases and settings as JSON from the app at any time.

Security

Connections to the service and to mail providers use TLS. Data at rest on Cloudflare is encrypted by Cloudflare. Mailbox credentials never leave your device’s Keychain.

Children

CatchNone is not directed at children under 13, and I do not knowingly collect data from them. If you believe a child has used the service, contact me and I will delete the account.

Changes

If this policy changes, I will update this page.

Contact

me@nikodembernat.com