Privacy Policy

Last updated: 27 January 2026

1. Introduction

C.Email was created by Certonymity ("we", "our", or "us") to protect digital privacy with encrypted emails. This privacy policy explains how we collect, use, and safeguard your information when you use C.Email.

We are committed to protecting your privacy and complying with data protection laws, as well as the requirements set forth by the Google Play Store, Apple App Store, and Google Cloud Platform (GCP).

2. Information we collect

We collect information that you provide directly to us, including your email address when you join our waiting list or contact us for support. The legal basis for this is consent.

We may also collect anonymized device information and usage metrics to improve app performance and address errors. The legal basis for this is our legitimate interest to improve the quality of our services.

If you choose to use our end-to-end encryption feature, encrypted message content is stored locally on your device. We do not collect or share this data.

To authenticate your email, we process your identity information on a one-time basis. Again, this data is stored only on your device. We do not collect or share this data.

3. How we use this information

We use the information we collect to:

Provide core functionality, such as accessing and sending emails from our C.Email app.

Enable end-to-end encryption for secure communications.

Maintain and improve C.Email's functionality, stability, and security.

Comply with legal obligations and enforce our terms and conditions.

4. Data retention

We retain minimal user data and only for as long as necessary. Access tokens and cached metadata are only stored locally.

5. Third-party services

We use the following third-party services:

Google and Outlook APIs (Gmail, Outlook Mail, OAuth 2.0): To access your Gmail or Outlook inbox and send/receive messages.

6. Information sharing

We do not sell, trade, or otherwise transfer your personal information to third parties.

7. Information security

We implement extra measures to secure your information on your device through post-quantum secure encryption.

8. End-to-end encryption

C.Email uses end-to-end encryption to protect your email communications. Encrypted emails are readable only by the sender and the intended recipients. We do not store or have access to your private encryption keys or emails.

9. Your rights

Use of authentication and end-to-end encryption is optional and controlled per message. You can revoke C.Email's access to your Gmail account, camera, and biometric data at any time. Deleting the C.Email app will delete all information held on your device.

10. Changes to this privacy policy

We may update this privacy policy at any time. Continued use of C.Email after changes implies acceptance of the new privacy policy. We will notify you of any significant changes within C.Email.

11. Contact us

If you have any questions about this privacy policy, please contact us.