Nuncio is in active development — building in the open, not shipping vapor.
Pre-alpha — do not use with real accounts or sensitive data yet

Privacy Policy

Last updated: July 29, 2026

1. Core Privacy Philosophy

Nuncio is designed around the principle that your email, calendar, contacts, and personal communications belong exclusively to you. There is no Nuncio-operated cloud service today — the software runs entirely on your own machine, and there is nothing for us to collect, aggregate, or sell even if we wanted to.

2. Local Data Storage & Encryption — What's Real Today

Account credentials, synced mail, search indexes, and filter rules are stored locally on your device in a SQLite WAL database. Passwords and OAuth tokens are routed through your operating system's native credential store (Keychain, Credential Manager, or Secret Service) — that part is real and enforced today.

What is not true yet: message bodies and other database content are currently stored unencrypted in that local SQLite file. Column-level encryption at rest is a design goal tracked on the security roadmap, not a feature you can rely on today. Do not store sensitive real mail in Nuncio until that lands.

3. Network Connections & Telemetry

Nuncio connects only to the mail servers you explicitly configure — IMAP and SMTP today; JMAP, CalDAV, and CardDAV are planned protocol backends, not yet available. The codebase does not run analytics, tracking pixels, or a telemetry service, and this website does not track visitors beyond ordinary server logs.

4. AI / Model Context Protocol (MCP) — Planned, Not Built

An MCP client that would let AI agents work with your mail through a governed gateway is on the roadmap. It does not exist yet, so no AI agent has access to your data through Nuncio today. When it ships, the design calls for human-in-the-loop confirmation before any high-risk action (like sending mail) is dispatched — that design has not been built or verified yet.

5. Changes to This Policy

Because Nuncio is under active, public reconstruction, this policy will change as the software's actual capabilities change. Check docs/ROADMAP.md in the GitHub repository for the current state of any feature referenced here.