Privacy

The app

• Your mail is fetched from your own JMAP server (Fastmail, or whichever you connect) straight from your iPhone. There is no WMail server in the path and no relay.
• The API token you create is stored in the iOS Keychain on your device. It is sent only to the mail host it belongs to. You can revoke it from your provider at any time.
• Mail, threads, folders, drafts, masked addresses and settings are cached on your device so the app works offline. Deleting the app deletes that cache.
• Templates and snooze records may sync between your own devices through your private iCloud database, if that is enabled. Apple holds those; nobody else can read them.
• Purchases of WMail Pro are handled entirely by Apple. WMail sees only whether a subscription is active, never your payment details.

Permissions the app asks for

• Calendar (write only) — asked for the first time you add an emailed invitation to your calendar. WMail cannot read your calendar.
• Contacts — used to read and write to contacts to make emailing people you know easier.
• Notifications — used for some features like snoozed mail and newsletter bundles.

This website

This site is hosted on Cloudflare and sets no cookies and loads no third-party fonts, advertising or social media trackers.

To understand how many people visit and which pages are useful, we use Umami, an open-source analytics tool that we host ourselves. No analytics company receives your data.

• What is recorded: the page you viewed, the site that referred you, your browser, operating system, device type, screen size and language, and your approximate location (country, region and city) worked out from your IP address.
• What isn’t: your IP address is not stored, no cookies or similar identifiers are placed on your device, and nothing is collected that could identify you personally. Visits are grouped using a one-way hash that resets regularly, so you can’t be recognised over time or followed across other websites.
• How it’s used: only as totals — for example, how many people read the FAQ this week. It is never sold, shared, combined with other data or used for advertising.
• Why: we rely on our legitimate interest in understanding how the site is used so we can improve it.
• Opting out: content and ad blockers that block analytics scripts will stop it, and the site works exactly the same without it.

Cloudflare keeps standard request logs (including IP addresses) for security and abuse prevention, under its own policies.

If you email us

An address you send to hello@wowmedia.net — to be told when the app launches, or for support — is used to reply to you and for nothing else. It is never sold, shared or added to a marketing list. Ask and it is deleted.

Changes

If this ever changes, the date at the top changes with it.

Contact

hello@wowmedia.net