Privacy policy

The short version

Alrighty is an app on your Mac. It has no servers and no accounts of its own, so we never receive your mail, your contacts or your searches. The app talks to your mail provider directly, and keeps what it needs on your Mac.

What the app stores on your Mac

Everything is kept in ~/Library/Application Support/Alrighty, readable by your user only:

• Your accounts: each address, and the sign-in token or app-specific password Alrighty uses to reach it, encrypted with a key held in the macOS Keychain.
• A search index of each account’s newest messages, so search works on your Mac. Alrighty doesn’t encrypt it separately; FileVault encrypts it with the rest of your disk.
• A cache of messages you’ve opened and each account’s folder list, so they open quickly and the app paints before the server answers.
• The search model, and copies of images you’ve chosen to load.
• Your settings, including the token for AI assistants if you’ve turned them on.

Removing an account deletes its saved sign-in, its cached messages and its part of the search index.

Who the app connects to

• Your mail providers (Google, Microsoft and Apple), to read and send your mail. Their own privacy policies cover what they do with it.
• Hugging Face, once, to download the search model.
• Senders’ domains, for a DNS lookup and a certificate download when a message that passed DMARC may have a verified brand logo (BIMI).
• Image hosts, only when you choose Load images on a message. These requests carry no cookies and no referrer, but the sender can tell the message was opened.

The app sends no analytics and no crash reports, and doesn’t check in with us.

AI assistants

If you turn on AI assistants, Alrighty runs a server that only programs on your Mac can reach, and only with your token. Whatever an assistant reads from your mail is sent to whoever runs its model, under that company’s terms: for example Anthropic for Claude Code or OpenAI for Codex. Alrighty can’t see or control what happens to it there. A model you run on your own machine sends it nowhere.

This website

The website has no accounts, sets no cookies and runs no analytics. Like any website, its host receives the usual request details, such as your IP address and browser. Its typeface is loaded from Fontshare, which receives the same.

Children

Alrighty isn’t directed at children under 13, and we don’t knowingly collect anything from anyone.

Changes

If what Alrighty collects or connects to changes, this page will change first, with a new date at the top. The changelog notes it too.