Privacy Policy
Last updated: July 23, 2026
1. Core Privacy Philosophy
Nuncio is built on the fundamental principle that your email, calendar, contacts, and personal communications belong exclusively to you. Nuncio does NOT collect, aggregate, sell, or analyze your personal messages, credentials, or metadata.
2. Local Data Storage & Encryption
All account credentials, cached emails, FTS5 search indexes, and filter rules are stored locally on your device inside an encrypted SQLite WAL database (`~/.nuncio/nuncio_main.db`). Credentials are encrypted using your operating system's native security keyring (Apple Keychain, Windows Credential Manager, Linux Secret Service).
3. Network Connections & Telemetry
Nuncio connects only directly to the remote IMAP, JMAP, SMTP, CalDAV, and CardDAV servers that you explicitly configure. Nuncio runs zero analytics scripts, zero tracking pixels, and zero remote telemetry servers.
4. Model Context Protocol (MCP) Safety
When using Nuncio with AI agents via MCP (`nuncio-mcp`), all tool evaluations run locally over stdio. AI prompt execution is guarded by Human-in-the-Loop (HITL) prompt interception before high-risk actions (such as sending emails) are dispatched.