Privacy notice

SMail is built so that there is very little about you to protect. This page says plainly what SMail keeps, what it never sees, and who to ask.

What SMail keeps

• Your verified display name, as your identity credential shows it, and the type and issuer of that credential.
• A pseudonym your wallet makes for SMail only. It cannot be linked to your answers to any other service.
• Your addresses and aliases, and the devices you use with their public keys.
• Ciphertext: your messages, attachments and documents, encrypted on your devices. SMail cannot read them.
• Envelopes: who wrote to whom, when, and the size, so mail can be delivered and listed.
• Badges: the type, issuer and fingerprint of credentials you choose to show, not their content.
• Account events such as sign-ins, devices added and settings changed, so you can see what happened.

What SMail never sees

• Your ID number, date of birth, home address, sex or photo. They stay in your wallet.
• The content of your mail or documents.
• A password. There is none.

Mail from ordinary email

If you keep the legacy gateway open, mail from outside SMail arrives in clear at the gateway, is sealed to your devices at once, and the clear copy is discarded. Addresses you block are dropped at the gateway.

Where it is kept

One hosted location in the European Union (AWS, Stockholm Region). SMail does not sell or share your data, and shows advertising to no one.

Your rights

You can export everything, built on your own device, and delete your account at any time with a confirmation from your wallet. Your address is then reserved for a year so no one else can take your name. Ask anything at [email protected].

SMail is operated by TrustChain, Kenya. This notice is written in plain language on purpose; it is not a substitute for the full terms, which are being prepared.