Legal

Privacy policy

Gusk AI · Effective 10 October 2026

Gusk AI (“the app”) is made by Gogulanathan Nagarajan, an individual developer. This policy explains what the app does with your email. The short version: your email stays between your mail service and your device. We don’t run a server, and we never receive, store, sell or share your data.

How you sign in

You connect Gmail, iCloud Mail, Yahoo Mail, Zoho Mail or another IMAP service with an app password, a separate password your mail service creates for one app. The app never uses your main account password.

• The app connects directly from your device to your mail service’s own IMAP (reading) and SMTP (sending) servers, always over TLS encryption.
• The app password is stored only in your device’s encrypted Keychain, is available only on that device, and is never backed up, synced or sent anywhere except to your mail service when signing in.

Data the app accesses

Using your app password, the app:

• reads your messages’ headers (sender, recipients, subject, date, folders or labels, size) to list and group your mail;
• reads a message’s body and attachments when you open it;
• archives, moves to Trash, labels or files, marks read or unread, and stars messages only when you ask it to;
• empties Spam or Trash, which deletes those messages permanently, only when you ask it to;
• sends email and saves drafts you write;
• sends an unsubscribe email to a mailing list, only when you tap Unsubscribe for that sender and the sender’s own unsubscribe instructions ask for an email;
• remembers, on your device, how you chose to handle a sender, and applies that choice to their new mail when it syncs;
• saves one small message labelled “Winnow Settings” in your own mailbox, holding your email signatures, so they appear on all your devices.

Where your data goes

• Your device only. Message details are cached on your device so the app opens quickly. The AI features (summaries, answers, suggestions) run on your device using Apple Intelligence; your email is not sent to any AI service and is not used to train AI models.
• Voice dictation. When you dictate, speech is converted to text by Apple’s speech recognition; the app does not keep the audio.
• Sender logos (off unless you turn them on). By default senders are shown with their initials and nothing is requested. If you turn on Load external sender logos in Settings → Security, the app requests an icon for the sender’s domain name (for example “amazon.com”) from Google, DuckDuckGo, Unavatar or the sender’s own website. Only the domain is sent — never your email address or any message content.
• Images in emails (off unless you allow them). Pictures that an email loads from the internet are blocked by default, because they can tell the sender that you opened the email and reveal your IP address. Tap Load Images on an email to load them for that email, or turn on Automatically load remote images in Settings → Security. Images attached to or embedded in the email itself always show.
• Diagnostic reports. Ask Gusk can prepare a troubleshooting report on your device. It contains no email content, contacts, passwords or email addresses, you see all of it first, and it leaves your device only if you choose to share it.
• Unsubscribe links. When you tap Unsubscribe and the sender provides a web link for it, that link opens in your browser, just as if you had clicked it in the email.
• Nowhere else. The developer has no server and receives no copy of your data. No analytics or advertising services are used.

How your data is protected

• Encrypted connections only. The app talks only to your mail service’s servers — and, only if you allow them, the icon services named above and the sources of an email’s images — over encrypted connections (images over HTTPS only). There is no developer server in between.
• App Lock. You can lock the app with Face ID, Touch ID, your device passcode or a separate app passcode (Settings → Security). The app never receives biometric data; only a scrambled check of an app passcode is kept, in this device’s Keychain.
• Encrypted storage on the device. On iPhone and iPad, the app’s mail cache uses iOS Data Protection, so it is encrypted and unreadable after a restart until you unlock the device. On a Mac it is stored in the app’s private sandboxed folder, protected by FileVault when that is turned on.
• No copies elsewhere. The developer never receives, stores or has access to your email, so there is no remote copy that could be breached.

Deleting your data

• Remove an account in Settings → Accounts. This deletes its app password and the mail stored for it on that device; your mailbox is untouched.
• Rebuild Local Index in Settings clears the local cache and downloads it again.
• Delete the app from your device to remove everything it stored there.
• Revoke the app password at any time in your mail service’s account settings.
• The “Winnow Settings” message and “Winnow/Reviewed” label live in your mailbox; you can delete them there.

Children

The app is not directed at children under 13.

Changes and contact

If this policy changes, the new version will be posted on this page with a new date. Questions: ngogulanathan@gmail.com.