Privacy

Your Google Account

When you add a Gmail account, you sign in on Google's own sign-in page. Sweep never sees your password. Google then gives Sweep permission to use the Gmail API on your behalf, with this single permission (scope):

https://www.googleapis.com/auth/gmail.modify: read, compose, send, and organize your Gmail messages. Sweep uses it only for the things you see in the app:

Sweep never deletes mail permanently. Anything you remove goes to Gmail's Trash, where Gmail's usual rules apply.

The keys Google issues for that permission (the access and refresh tokens) are stored in the iOS Keychain on your device, marked so they are never synced to iCloud or moved to another device.

Google API Services User Data

Sweep's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In practice, that means your Gmail data is used only to provide and improve the features you see in Sweep. It is not transferred to anyone, used for advertising, sold, or used to train AI or machine-learning models. No person, including us, reads it. The only exception would be if the law required it, and because the data never reaches us, we have nothing we could hand over.

On Your Device

Sweep keeps a cache of your recent mail in its private storage on your iPhone or iPad so the inbox opens fast and works offline. That cache sits in a folder excluded from iCloud and computer backups, so your mail is never copied into them. After a restore, it downloads again from Gmail.

Bundles, highlight cards (orders, trips, events), and checks on whether a sender is who they claim to be are all worked out on the device, from the mail already there. Suggested replies, where available, come from Apple's on-device Apple Intelligence model. Nothing is sent anywhere to produce them.

Reminders you create in Sweep are stored on the device, plus a small backup file that is included in your iCloud or computer backup so they survive a restore. If you allow it, Sweep also puts each reminder in Apple's Reminders app, where your own Reminders and iCloud settings apply.

A few preferences, such as appearance, text size, notification and image settings, are stored using Apple's standard UserDefaults mechanism. They are settings, not content.

Who Sweep Talks To

Sweep connects only to Google: Google's sign-in and token endpoints, and the Gmail API. To check for new mail while the app is closed, it asks iOS to wake it now and then. There's no push server of ours.

Emails can contain remote images, including tracking pixels that tell a sender when you've opened a message. Sweep blocks them by default. They load only if you tap Load images, or turn on loading them automatically in Settings. When they load, your device fetches them directly from the sender's servers, just as any mail app would. Scripts in email never run.

New-mail and reminder notifications are created locally on your device. They don't go through Apple's or anyone else's push service.

What We Never Do

Your Control

Removing an account in Sweep's Settings tells Google to revoke Sweep's access, deletes its keys from the Keychain, and deletes that account's cached mail from the device. Nothing changes in Gmail itself. Your reminders stay.

You can also revoke Sweep's access at any time from your Google Account at myaccount.google.com/permissions. Deleting the app removes everything it stored on the device.