← CJ Designs

Easy Email Manager — Privacy Policy

Effective 19 August 2026

Easy Email Manager is made by CJ Designs. It is a secure place to keep the login details for your email accounts — addresses, passwords, hosting and webmail settings — so you can find them when you need them. It is not an email client: it never connects to a mailbox, never sends or receives mail, and never reads your messages. It does all of this on your own device or in your own browser. There is no account, no sign-in, and no server belonging to us that holds any of it.

The short version: nothing leaves your device unless you deliberately export it.

The app makes no network requests of any kind. On Android this is stronger than a promise — the released app does not declare internet permission, so it could not make a request even if a future version tried to.

The Web Companion at easymailmanager.eu works the same way: it is a page your browser runs, not a service we operate on your data. It stores everything it holds, encrypted, in your browser's own local storage (IndexedDB) — we never receive it.

The most sensitive thing this app holds: your passwords

What you store here can include the password to your email account. We treat that as the single most sensitive piece of information the app touches. We never receive it, it is never transmitted anywhere, and it is never included in any diagnostic, log, or crash report — because the app has no means of sending it anywhere and keeps no logging of your data at all.

What the app stores, and where

InformationWhere it is kept
Email address, password, hosting company, IMAP/SMTP/webmail details and notes you add for an accountAn encrypted database in the app's private storage on your device (mobile), or encrypted in your browser's local storage (Web Companion)
App settings — theme, app lock preferenceThe same on-device store
Backup files you create (.eembackup)Wherever you chose to save them

On mobile, the database itself is encrypted with SQLCipher, and the database's own encryption key is generated on-device and held in the iOS Keychain or Android Keystore — it never leaves the device and is never included in a backup. On the Web Companion, each account record is individually encrypted (AES-256-GCM) before it is written to IndexedDB, using a key derived from your vault password via Argon2id; that key exists only in your browser's memory while the vault is unlocked, and is cleared when the tab is hidden or after 15 minutes of inactivity.

What we never collect

Backups you make

A backup is a single encrypted .eembackup file: AES-256-GCM, with the key derived from a password you choose using Argon2id.

Nobody holds a copy of that password — not the app, not CJ Designs, not Apple or Google. There is no escrow, no recovery code and no reset. A backup whose password has been forgotten cannot be opened by anyone, permanently. The app tells you this before your first backup.

Where the file goes is your choice, and the destination's privacy is then the destination's: a backup saved to iCloud Drive or Google Drive sits on that service, still encrypted, until you remove it.

Device and cloud backups — the two platforms differ

This is separate from the backups you make yourself, and it is the one place where your stored account details can leave your phone without you doing anything.

On Android: the app declares no internet permission and its data is excluded from Android's automatic cloud backup and device-to-device transfer. Your data does not go to Google Drive.

On iPhone and iPad: the app's data is included in your iCloud Backup and in encrypted local backups, along with the rest of your phone. If you have iCloud Backup switched on, this app's database is part of it, protected by Apple under Apple's terms rather than by anything this app does. If you would prefer that not to be the case, you can turn iCloud Backup off for Easy Email Manager in your iPhone's Settings, under your name → iCloud.

Permissions the app asks for

PermissionAsked whenWhat it's for
Face ID / biometricsYou turn on the app lock, or reveal/copy a passwordUnlocking the app and re-authenticating before showing a secret. Handled entirely by the OS — the app never sees your biometric data.
Photo library (iOS)You choose "Restore Backup"Required by the system file picker itself; the app does not browse or access your photos.

Keeping it, and deleting it

Your information is kept for as long as you keep the app or the vault. Nothing expires, and nothing is deleted on our behalf, because we have no copy to delete.

Uninstalling the app, or clearing your browser's site data for the Web Companion, removes everything with it. There is no copy anywhere else, unless you made a backup yourself, or you are on iPhone with iCloud Backup switched on.

Your rights

Data protection law gives you rights to see, correct, export and delete the personal information an organisation holds about you. In this app all four are things you already do directly: the information is on your device or in your browser, you can edit any of it, you can export it as a backup file, and you can delete it. We hold nothing about you, so there is nothing for us to send you or erase on request.

Children

Easy Email Manager is not directed at children under 13, and we do not knowingly collect data from them.

Changes to this policy

If this policy changes, the updated version will be posted at this address with a new effective date.

Contact

CJ Designs — support@cjdesigns.app