JustMail for Windows — Privacy Policy

The short version: JustMail is a desktop email client that runs on your own computer. Your email, your passwords, and your contacts stay on your device and travel only between your computer and the email providers you choose to connect. HackitzLabs does not run servers that receive, read, or store your mail. There are no ads, no analytics, no tracking, and we never sell your data.

This Privacy Policy explains how JustMail for Windows (“JustMail,” “the app”) handles information. JustMail is made by HackitzLabs, the software division of Northern Kreations (“we,” “us,” “our”). By using the app you agree to the practices described here.

1. Our approach

JustMail is a “local-first” application. It is not a web service and does not have a user account of its own. The app connects directly to the email servers you configure, using the standard IMAP, POP3, and SMTP protocols, in the same way a program like Thunderbird or Outlook does. We designed it so that your personal data lives on your computer and under your control — not on our infrastructure.

2. Information JustMail handles

Your email accounts and messages

To do its job, JustMail stores the account details you enter (such as your email address, display name, and incoming/outgoing server settings) and the messages, attachments, and contact addresses it retrieves from your mailbox. This information is kept locally on your computer so the app can display and manage your mail. It is not transmitted to HackitzLabs.

Account credentials

The passwords or app-passwords you provide are stored locally on your device and are used only to sign in to the email servers you have chosen. We never receive or have access to your credentials. Because these are stored on your computer, we recommend using your operating system’s disk encryption (for example, Windows BitLocker) and a device login password to protect them.

Data stored on your device

JustMail keeps its data in your Windows user profile (the application data folder). This can include account settings, cached copies of messages you have opened, signatures, chosen background images, and a local diagnostic log (app.log) that records errors to help with troubleshooting. The diagnostic log stays on your computer and is not sent anywhere. You can remove all of this data at any time by deleting the app’s data folder or uninstalling the app (see “Deleting your data” below).

3. Network connections the app makes

For transparency, here is every situation in which JustMail contacts a server over the internet:

a. Your email providers

JustMail connects to the incoming (IMAP/POP3) and outgoing (SMTP) servers you configure in order to fetch, send, and manage your mail. These connections use encryption (SSL/TLS or STARTTLS) where your provider supports it. The information exchanged — including your login and message content — goes only to the provider you chose. Your email provider’s own privacy policy governs how they handle it.

b. Mail server auto-configuration

When you add an account, JustMail can look up the correct server settings for your email domain to save you from entering them by hand. To do this it queries the public Thunderbird autoconfiguration database at autoconfig.thunderbird.net, sending only the domain part of your email address (for example, gmail.com) — never your full address or password. If the lookup fails, the app falls back to standard server-name conventions and no request is made.

c. App updates

If you installed JustMail from the downloadable installer, the app periodically checks for new versions so you receive fixes and improvements. It does this by contacting our public releases repository hosted on GitHub. As with any web request, GitHub’s servers may receive standard technical information such as your IP address and the app version; this is handled under GitHub’s own privacy policy. Update checks contain no personal information from your mailbox. Copies of JustMail installed from the Microsoft Store are updated by the Store instead.

d. Optional Nextcloud attachments

JustMail includes an optional feature for sending large attachments through a Nextcloud server. This is used only if you choose to set it up and enter your own Nextcloud address and credentials. When enabled, selected files are uploaded to your own Nextcloud server and a share link is created. Nothing is sent to HackitzLabs, and this feature is entirely off unless you configure it.

e. License verification

JustMail offers a 30-day free trial, after which continued use requires a one-time paid license. When you enter a license key to activate the app, JustMail sends that key to our payment provider, Payhip, to confirm it is valid. This request contains the license key only. Purchases themselves are completed on Payhip’s website; HackitzLabs never sees or stores your payment card details. See “Purchases and payments” below.

4. Device pairing & sync

JustMail includes an optional feature that lets you set up JustMail on another device — for example, configuring your Windows PC from your phone, or the other way around — by copying your existing setup to it. It only ever runs when you deliberately start it.

How it works. To pair, JustMail on Windows displays a QR code containing a freshly generated, one-time encryption key, and briefly listens on your local network for your other device to connect. The other device scans the code with its camera and connects directly to your PC over your local network (Wi-Fi/LAN) to transfer the data. The Windows app itself does not use a camera. No outside server, relay, or cloud service is involved — the data goes straight from one of your devices to the other, and never through HackitzLabs.

What is transferred. Your email account setup (server addresses, ports, usernames), your account passwords, and your app settings (such as signatures, mail-handling rules, quiet senders, templates, theme, and general preferences). Your cached messages and your contacts are not transferred.

How it is protected. The transfer is end-to-end encrypted using AES-256-GCM. The encryption key exists only on the two devices and travels only from the on-screen QR code into the scanning device’s camera — it is never sent over the network. Each pairing session is single-use and expires after one transfer, so it cannot be reused or replayed.

Your control. Pairing happens only when you start it and confirm the transfer on the receiving device. Afterwards, each device keeps its own local copy, which you can remove at any time (see “Deleting your data” below).

5. What JustMail does not do

  • No ads. The app contains no advertising of any kind.
  • No analytics or telemetry. JustMail does not include usage-tracking, behavioral analytics, or crash-reporting services that send data to us or to third parties.
  • No third-party trackers. The app bundles no advertising or tracking SDKs.
  • No data sales. We do not sell, rent, or trade your information. We have no way to, because we never receive it.

6. Protection from tracking in emails

Many emails contain remote images and invisible “tracking pixels” that report back to the sender when a message is opened. To protect your privacy, JustMail blocks remote images by default and only loads them when you choose to display them for a particular message. This helps prevent senders from silently learning that you have read their mail.

7. Purchases and payments

Payments for a JustMail license are processed by Payhip, a third-party e-commerce provider, on their own checkout pages. Any information you enter to complete a purchase (such as your name, email address, and payment details) is collected and processed by Payhip under Payhip’s Privacy Policy. HackitzLabs receives only the confirmation and license information needed to provide your license and support — never your full payment card number.

8. Children’s privacy

JustMail is a general-purpose email tool intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children.

9. Data security

Because JustMail stores your data on your own device rather than on our servers, the security of that data depends largely on the security of your computer. We use encrypted connections to email servers where available and block remote email content by default. We encourage you to keep your operating system up to date, use device encryption, and protect your computer with a strong login password.

10. Deleting your data

You are in control of your data at all times. Removing an account within the app deletes its stored settings and cached mail for that account. Uninstalling JustMail, and deleting its application data folder, removes all locally stored information the app created. Because we do not hold your mail or credentials, there is nothing on our side to delete.

11. Your rights

Depending on where you live, privacy laws such as Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) or the EU/UK GDPR may give you rights to access, correct, or delete personal information a company holds about you. Because JustMail keeps your personal data on your own device and HackitzLabs does not collect it, you can exercise these rights directly on your computer. If you have purchased a license and wish to access or delete the limited purchase information associated with it, contact us using the details below.

12. Changes to this policy

We may update this Privacy Policy from time to time — for example, if we add a feature that changes how the app handles data. When we do, we will revise the “Last updated” date above and post the new version on this page. Significant changes will be noted clearly.

13. Contact us

If you have any questions about this Privacy Policy or how JustMail handles your information, please contact us at hackitzlabs@hackitz.net.