Privacy Policy
Last updated: 1 September 2026
This Privacy Policy explains how Saddle handles personal data when you use the Saddle iPhone application, saddlemail.com and the services that support them (together, the “Service”).
Saddle is an email client and productivity application that connects to Gmail. Thomas Carrington Smith, a sole trader trading as Saddle, is the controller of personal data handled by Saddle. Our address is 5 Tanner St, London SE1 3LE, United Kingdom, and you can contact us at support@saddlemail.com.
1. Gmail and email data
When you connect Gmail, Google gives Saddle the access you approve. Saddle uses that access only to provide the email features you request, such as displaying, searching, organising, drafting and sending email, and notifications.
On your iPhone
Saddle connects directly to Gmail to retrieve email. Email bodies, attachments, drafts, mailbox state and a search index may be cached on your iPhone so that the app works quickly and, where supported, offline. Google credentials are stored in the iOS Keychain. Ordinary email bodies and attachments are not stored on Saddle's servers.
Saddle's background service
Saddle uses a limited background service hosted on Google Cloud to provide notifications and Later. It stores your Gmail address and Google account identifier, an encrypted Google credential, and limited encrypted or hashed information needed to route notifications and restore threads at the time you choose. It also keeps the timing and status of Later requests and limited technical and security logs.
The background service does not store ordinary email bodies or attachments. Notifications sent to your device contain no email subject, sender, body or attachment.
We use this information to perform our contract with you by operating the connected-email, notification and Later features. We also use limited technical logs where necessary for our legitimate interests in securing, diagnosing and maintaining the Service.
Google API Limited Use
Saddle's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.
We do not sell Google user data, use it for advertising, or use it to build advertising profiles. People do not read your email unless you ask us to for support, it is necessary to investigate abuse or a security incident, or we are legally required to do so. Saddle does not currently send email content to a third-party AI provider.
2. Other information we handle
We may handle:
- App and device information: app version, device type, operating-system version, notification token and settings needed to operate and support Saddle.
- Anonymous product analytics: Saddle uses TelemetryDeck to record a small set of events, such as a session starting or a feature being used, together with an anonymised installation identifier and basic app and device information. We do not send TelemetryDeck email addresses, message content, recipients, subjects, Gmail identifiers, search queries or free-form text. You can turn this off in Saddle's settings. TelemetryDeck says it does not store IP addresses and hosts this analytics infrastructure in the European Union. See TelemetryDeck's privacy information.
- Support communications: if you contact us, we receive your email address and anything you include in your message, such as screenshots, diagnostic information or attachments. We use this to answer your request and improve or protect the Service.
- Purchase information: if you purchase Saddle, the payment service shown at checkout processes your payment. Saddle may receive information such as your subscription status, transaction identifier, billing country and purchase history, but not your full payment-card details.
- Website and service logs: our hosting providers may process basic connection and security information, such as IP address, request time, route, browser or device type and error information.
We use support and purchase information to perform our contract with you. We use minimal analytics and technical information for our legitimate interests in understanding, improving and securing Saddle, where those interests are not overridden by your rights. We may also keep information where necessary to comply with law or establish, exercise or defend legal claims.
Saddle does not use personal data for solely automated decisions that have legal or similarly significant effects on you.
3. Who receives information
We do not sell or rent personal data. We share information only as needed with providers that help us run Saddle, including:
- Google, for Gmail, authentication, Google Cloud hosting, Firestore and Pub/Sub;
- Apple, for distributing the app and providing push notifications;
- payment and subscription providers identified when you purchase Saddle; and
- TelemetryDeck, for anonymous product analytics.
We may also disclose information if required by law, to protect users or the Service, or in connection with a sale or reorganisation of the business, subject to appropriate protections.
Some providers may process information outside the United Kingdom. Where UK data-protection law requires a safeguard, we rely on an adequacy regulation or approved contractual protections. You can ask us for more information about the safeguard relevant to your data.
4. Retention and deletion
We keep personal data only for as long as needed for the purposes described above, including providing the Service, resolving support or security issues, meeting legal obligations and handling disputes.
Your on-device mail cache and credentials remain until you remove the account, reset Saddle or delete the app. Removing data from Saddle does not delete the underlying email from Gmail.
When you disconnect an account, Saddle removes its local cache and credentials and asks our background service to stop processing the connection. Limited encrypted or hashed unlink and security records may be retained while reasonably needed to prevent an old device or connection becoming active again. Pending Later records remain until they are completed or cancelled; completed Later routing records are scheduled for deletion after seven days. Technical logs and backups are deleted or overwritten under our providers' and our normal retention cycles.
Anonymous TelemetryDeck events remain available for the retention period of Saddle's TelemetryDeck plan. Because Saddle does not receive information that can link those events back to your Gmail account, we may not be able to identify an earlier event as yours.
You may revoke Saddle's Google access in your Google Account and may ask us to delete personal data held by Saddle by emailing support@saddlemail.com. We will delete or anonymise it unless we need to retain it for a legal reason.
5. Security
We use measures designed to protect personal data, including encrypted network connections, iOS Keychain and file protection, and encryption of sensitive credentials and routing references held by the background service. No system is completely secure, so we cannot guarantee absolute security.
6. Children
Saddle is intended for adults. A parent or legal guardian may permit a dependent aged 13 or older to use Saddle under their supervision. Saddle is not available to children under 13. If you believe a child under 13 has provided personal data to Saddle, contact us so we can investigate and delete it where appropriate.
7. Your rights
Depending on where you live, you may have rights to ask us for a copy of your personal data, correct it, delete it, restrict or object to its use, or provide it in a portable form. Where processing relies on consent, you may withdraw that consent at any time. These rights may be subject to legal exceptions.
To exercise a right, email support@saddlemail.com. We may need to verify your identity. If you are in the UK, you may also complain to the Information Commissioner's Office. If you are elsewhere, you may complain to your local data-protection authority.
8. Changes and contact
We may update this policy when Saddle, the law or our providers change. The latest version and its date will be posted at saddlemail.com/privacy. If a change materially affects how we use personal data, we will provide reasonable notice where practicable.
Questions, complaints and privacy requests may be sent to:
Saddle
Thomas Carrington Smith, sole trader
5 Tanner St, London SE1 3LE
support@saddlemail.com