How KeepMyMail Keeps Your Data Safe

Last updated: 2026-03-29

We built KeepMyMail with security as a core priority. Here’s how we protect your data at every step.

We can only add email to your Gmail

KeepMyMail uses a special Google permission that only allows us to add new messages to your Gmail. We cannot read your existing emails, send messages as you, delete anything, or access your contacts or calendar. See the full list of permissions we use.

We never store your emails

When KeepMyMail checks your other email account, messages are fetched, delivered directly into your Gmail, and immediately discarded from our system. Your email content is never written to disk or stored in any database. We act purely as a relay — your emails go from your email provider to Gmail with no pit stops.

Your passwords are protected

The password you provide for your email account is encrypted before it’s stored in our database. The encryption key is kept completely separate from the database itself, so even if someone gained access to our database, they could not see your password. Your password is only briefly decrypted in memory when we connect to your email server to check for new messages.

Everything is encrypted in transit

All connections between you and KeepMyMail, and between KeepMyMail and your email provider, use TLS encryption (the same technology that protects online banking). We always use secure connections when checking your email, and we support both implicit TLS and STARTTLS for compatibility with all email providers.

Google verification

KeepMyMail has undergone Google’s app verification process, which confirms that we follow their security standards, only request the permissions we actually need, and comply with the Google API Services User Data Policy including the Limited Use requirements. This means Google has independently reviewed how we handle your data.

You’re always in control

You can sign out all other devices at any time from Settings > Security > Sign Out All Other Devices. This immediately invalidates every other active session while keeping your current session active.

You can pause or delete any mailbox at any time. If you want to completely remove your KeepMyMail account, go to Settings and click Delete Account. This will:

• Revoke KeepMyMail’s access to your Google account
• Delete all your mailbox configurations and sync history
• Permanently erase all stored passwords

Emails that have already been delivered to your Gmail will stay there — they’re yours and we have no ability to remove them.

Our infrastructure

KeepMyMail runs on Cloudflare’s global network, which provides DDoS protection, automatic HTTPS, and edge security. Your data is stored in Cloudflare’s encrypted infrastructure with strict access controls.

Data retention

We retain your mailbox configuration and sync history for as long as your account is active. Sync history is kept for 7 days on the Free plan and 90 days on the Pro plan. When you delete your account, all data is permanently removed. We comply with GDPR and other applicable data protection regulations. For full details, see our Privacy Policy.