SorteroAI Privacy Policy

Last updated: 2026-06-02
Contact: support@sorteroai.app

Summary

SorteroAI is an Android app that organizes your Gmail using labels and filters. We do not operate servers that store your mail. Processing happens on your device; Gmail is accessed only through Google’s APIs after you sign in.

Data we access (Google Gmail API)

Data	Purpose	Stored on device?
Message metadata (From, To, Subject, label IDs)	Sorting and category rules	Sort explanations (redacted for sensitive mail)
Optional snippet preview	Rule matching when mail is not sensitive	Not stored long-term
Gmail labels & filters	Create/update labels and filters you enable	Category and filter IDs in encrypted local storage
Google account email	Show connected account	Until sign-out
Google Play purchase state	Unlock Premium subscription or lifetime purchase	Entitlement state cached locally; payment details are handled by Google Play

We do not read full message bodies (format=full), attachments, or send email on your behalf.

Category discovery (setup & re-analyze)

If you turn on Scan mail for setup, the app reads message metadata only
(From, To, Subject, and optionally a short snippet when mail is not classified
as sensitive) to suggest categories.

On a new install (before you change settings), the discovery scan window
defaults to the last 90 days of mail.
Optional: you can extend the window to 180 or 365 days under
Settings → Privacy & sorting → Discovery.
After Delete all app data, the app resets preferences to factory defaults,
including a 365-day discovery window until you change it again.
Labels-only discovery: sender and subject only — no snippet API calls.
Sensitive senders are excluded from category hit counting (see our security
documentation).

When you turn on Sort mail automatically (one-tap mode, default ON),
SorteroAI may apply Gmail labels to messages that match your category rules
without asking you on every message. This is not machine learning: each
match uses deterministic, explainable rules (sender, subject, headers) and
you can see a short reason in Sort explanations after a run.

We mitigate fully automated sorting with safeguards documented in our
algorithm spec §6.3.2:

Explainable rules — no opaque models; reasons are stored locally (redacted for sensitive mail).
72-hour Undo — Privacy & sorting → Undo last organize reverses the last Organize run.
Override learning — if you remove a Sortero label from a sender in Gmail several times, we stop auto-applying that category for that sender on this device (hashed sender key only; see SECURITY.md §6.1).
Bulk confirmation — by default, more than 200 auto-labels in one run requires your confirmation before applying (you may choose Don't ask again after the first prompt).
Conditional categories — new 🟨 categories need repeated observations (≥3 hits) and skip sensitive senders; see discovery settings above.

If you prefer more control, turn Sort mail automatically off: very high-confidence matches (≥90%) can still be filed automatically; medium-confidence matches (65–89%) are suggested for your review instead.

Full technical thresholds: email-labeling-algorithm.md §6.3.1.

Google API Services User Data Policy

SorteroAI’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements:

We use Gmail data only to provide user-facing mail organization features in this app.
We do not transfer Gmail data to others except as necessary to provide the feature (Google infrastructure only).
We do not use Gmail data for advertising.
We do not allow humans to read Gmail data unless required for security, legal compliance, or with your explicit consent.

Local storage & security

Categories, rules, and settings are stored in encrypted preferences on your device.
Trial and purchase entitlement state is stored locally so the app can decide
whether Premium features are available. We do not receive or store payment
card details.
You can export settings (JSON, no mail) or delete all app data from Settings → About.
Android backup is disabled (allowBackup=false); use Export settings (JSON) for a portable copy.

Data retention

Most data remains on your device until you delete it or uninstall the app.
Signing out stops sync; Gmail labels you already have remain in Gmail.

Hashed learning data (on device only): To support override learning and
smart-label recurrence, the app may store hashed sender keys and hit
counters — not raw email addresses or message content. These counters are
automatically pruned after approximately 90 days (override learning) or
180 days (recurrence data), and are removed when you use Delete all app
data.

Data deletion

SorteroAI has no SorteroAI-operated servers and no online account database.
All user data is on your Android device and in your Google account (labels/filters
the app created there).

You can delete your data as follows:

What you want	How
Remove all SorteroAI app data on the device	Settings → Privacy & sorting or About → Delete all app data (also removes SorteroAI-managed Gmail labels/filters and signs you out)
Export a copy of settings (no mail) before deleting	Settings → About → Export settings (JSON file)
Remove the app entirely	Uninstall SorteroAI from Android (remaining encrypted files are removed with the app; Gmail labels/filters you created via the app may remain until you delete them in Gmail or run Delete all app data first)

Public URL for account/data deletion requests (Google Play):
https://sorteroai.app/privacy#data-deletion

For help, email support@sorteroai.app.

Children

SorteroAI is not directed at children. We do not knowingly collect personal
information from children under 13 (U.S. COPPA) or under 16 where EU/UK
law requires parental consent for information society services, unless your
local law sets a lower age between 13 and 16.

Changes

We may update this policy; the in-app link will point to the current version.

Contact

Questions: support@sorteroai.app