MyCorreoApp Privacy Policy

Last updated: October 26, 2026

This policy explains how the MyCorreoApp application (Android, iOS and desktop), developed and published by LORENGRAFF Technologies, Inc. ("LORENGRAFF", "we", "us"), processes your personal data. It supplements our general Privacy Policy; for the app, this text prevails.

1. Data controller and contact

Controller: LORENGRAFF Technologies, Inc., Las Terrenas, Samaná, Dominican Republic. Privacy questions and rights requests: support@lorengraff.net. Security: security@lorengraff.net.

2. What MyCorreoApp is

MyCorreoApp is an email client for accounts hosted on our MyCorreo service (mycorreopersonal.com). It lets you read, write, organise and search your mail, manage your auto-reply, password and two-step verification, and receive new-mail alerts. The app contains no ads, does not sell data and does not track your activity across other apps or websites.

3. Data the app processes

a) Account credentials. Your email address and password, or the access tokens of two-step verification (OAuth 2.0 with PKCE). They are stored encrypted in the device's secure storage (Android Keystore / iOS Keychain) and are only sent to our mail server, always over HTTPS.

b) Mail and mailbox content. Messages, folders, attachments, signature, display name and auto-reply. They live on our mail server; the app downloads what it needs to show them and keeps a temporary copy (cache) on the device, deleted when you sign out. This copy is excluded from system backups.

c) Photos and files you choose. Only those you pick in the system picker to attach to a message. The app does not access your camera, microphone, contacts, location or the rest of your photo library.

d) Notifications. If you turn on new-mail alerts, the app obtains a Firebase Cloud Messaging (Google) token and registers it with our push server (push.mycorreopersonal.com) together with an opaque subscription identifier. Alerts sent to the phone contain no message text: the app checks the server and shows the alert on the device itself.

e) Crash reports and usage statistics (Firebase Crashlytics and Google Analytics for Firebase). If the app crashes, a technical report is sent: device model and OS, app version, error trace and the screen where it happened. Statistics record app usage (screens, sessions, version) in aggregate. They never include the content of your mail, addresses, contacts or credentials. The advertising ID is not used, and ad personalisation and ad storage are disabled. You can turn both off in Settings › Privacy.

f) Integrity verification (Firebase App Check, with Play Integrity on Android and App Attest / DeviceCheck on iOS). It checks that requests to our Firebase services come from the genuine app on a genuine device. Google and Apple receive technical signals about the device and the app; no personal content is sent.

g) Sender logos (optional, off by default). If enabled, the app asks our server for the icon of the sender's domain (e.g. example.com) to show it in the list. Only the domain name is sent.

h) App lock. If you enable the fingerprint, face or passcode lock, verification is done by the operating system; the app never receives or stores your biometric data.

i) Server technical data. Like any mail service, our server logs the IP address, access date and time and security events (sign-ins, errors) to protect your account and prevent abuse.

4. Purposes and legal bases

Providing the mail service you subscribed to or requested (performance of a contract): a), b), c), d), h), i).
Keeping the app stable and fixing bugs (legitimate interest, you can opt out): e).
Protecting the service against fraud and tampered apps (legitimate interest): f), i).
Showing sender logos (your consent when enabling it): g).

We do not use your data for advertising, commercial profiling or automated decisions, and we do not train artificial intelligence models on your mail content.

5. Who we share data with

We do not sell or rent personal data. Only these providers are involved, as processors and solely for the purposes described:

Google LLC (Firebase): Cloud Messaging (alerts), Crashlytics (crashes), Analytics (statistics) and App Check / Play Integrity (integrity). Firebase privacy.
Apple Inc.: App Attest / DeviceCheck and the iOS notification service.
Infrastructure providers hosting our mail and push servers, under contract and equivalent security measures.

We may disclose data where required by law or a competent authority, after verifying the request is valid.

6. Security

All communications use TLS encryption (HTTPS). Credentials are kept in the system's encrypted storage. Remote images in messages are not loaded without your permission, to prevent read tracking. The app supports two-step verification and biometric lock. We follow DevSecOps practices: security reviews, audited dependencies and least-privilege permissions.

7. Retention

Data on the device: until you sign out or uninstall the app.
Mail on the server: while your account is active; once deleted, it is erased within 30 days and removed from backups within 90 days.
Push token: until you turn off alerts, sign out or the token expires.
Crash reports: 90 days (Crashlytics). Statistics: 14 months (Analytics).
Server security logs: up to 12 months, unless the law requires otherwise.

8. Your rights and account deletion

You may request access, rectification, erasure, restriction, portability or objection by writing to support@lorengraff.net. We will reply within 30 days. To delete your account and all its data, follow the instructions at Delete your MyCorreoApp account, also reachable in the app under Settings › Privacy › Delete my account and data. You may also lodge a complaint with the data protection authority of your country.

9. Device permissions

Notifications: to alert you of new mail (optional).
Biometrics (fingerprint / Face ID): only for the app lock (optional).
Internet and network state: to connect to your mail server.
System photo and file picker: only what you choose to attach.

10. International transfers

Google and Apple may process data in the United States or other countries, under the contractual safeguards they provide (such as the European Commission's Standard Contractual Clauses).

11. Children

MyCorreoApp is not directed to children under 13 (or the minimum age in your country) and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

12. Open source

MyCorreoApp is free software under the AGPL-3.0 licence, based on Bulwark. You can request its corresponding source code at support@lorengraff.net.

13. Changes to this policy

Any change will be published on this page with its update date. Significant changes will also be announced within the app.