Privacy Policy
What NARRA is
NARRA is an email client that connects to mail accounts you choose — Microsoft 365 / Outlook and Gmail / Google Workspace — and presents them as one unified inbox across web, desktop, and iOS apps. To do that, it needs access to your mail. This page explains exactly what we store and why.
Information we collect
- Account information. When you sign in with Microsoft or Google, we receive your name and email address from that provider. We never see or store your password for those accounts; authentication uses OAuth.
- Mail data. To provide a fast unified inbox, NARRA syncs a copy of your mailbox — messages (including subject, sender, recipients, and body), folders, and read/unread state — into our database. This is the core of the service and is used for nothing else.
- OAuth tokens. The tokens that let NARRA read and send your mail are stored encrypted (AES-256-GCM) and used only to operate your account's sync and actions.
- Contacts shown in the contact pane. Basic details about people you correspond with, drawn from your mailbox and your provider's contacts API.
- Device tokens. If you enable push notifications on iOS, we store an Apple push token for your device so we can deliver new-mail alerts.
- Settings. Preferences such as theme, layout, snippets, and per-account colors.
- Billing information. Stripe processes subscription checkout and payment details. NARRA stores Stripe customer and subscription identifiers, plan, status, renewal dates, and payment-state events. NARRA does not store your complete card number.
How we use it
Solely to provide NARRA: syncing and displaying your mail, sending messages you compose, triage actions (archive, snooze, move, unsubscribe, block), search, notifications, and contact context. We do not sell your data, show ads, or use your mail to train AI models.
Optional features that share data when you use them
- AI assistance. AI features (like thread summaries or drafting help) run only when you invoke them, using an API key you provide for your chosen provider (Anthropic, OpenAI, or Google). When invoked, the content of the relevant thread is sent to that provider under your key and their terms. Your keys are stored encrypted.
- Contact enrichment. If you add a People Data Labs key, the email address of a contact you view may be sent to People Data Labs to retrieve public professional profile details.
- Push notifications. New-mail alerts (sender and subject line) are delivered through Apple's push notification service.
- Read Statuses. If you opt in, NARRA adds a random, non-enumerable one-pixel image to newly queued outbound mail. A fetch can produce Not seen, Unconfirmed, or Likely seen. Unconfirmed means an automated service, privacy proxy, or security scanner fetched the image; it does not confirm a human view. A fetch cannot prove a person read the message and may never occur when remote images are blocked. NARRA stores the event time, a normalized classification/reason, and a minimal dedupe hash — not the recipient's raw IP address, location, full user agent, or device profile. The status has no legal significance, and multi-recipient messages never identify an exact reader.
- Subscription billing. When you subscribe, account and purchase information is sent to Stripe to create and manage your subscription, collect payment, deliver receipts, and support fraud prevention and payment recovery.
Where your data lives
NARRA runs on Vercel (application hosting), Supabase (database and authentication), and Stripe (subscription billing), in United States regions. These providers process data on our behalf as infrastructure and do not use it for their own purposes.
Google user data
NARRA's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Gmail data is used only to provide the unified inbox features you see, is never transferred to third parties except as necessary to provide those features, and is never used for advertising.
Security
All traffic uses TLS. OAuth tokens and API keys are encrypted at rest. Database access is restricted to the application with row-level security enabled. As a beta product, NARRA's security posture is actively being strengthened, and this section will be expanded as additional layers ship.
Retention and deletion
Synced mail is retained while your account is connected so the unified inbox stays fast. Raw Read Status event rows are deleted after 30 days; the minimal display summary is retained with the related outbound message while the account remains connected. Disconnecting an email account stops syncing it. To delete your NARRA account and all stored data — including the synced mail mirror, tokens, settings, and local billing mirror — use the in-app deletion control or email us and we will remove it promptly. Deleting data in NARRA's mirror does not delete the original messages in your Microsoft or Google account, and vice versa where noted in-app.
Your choices
- Connect or disconnect email accounts at any time.
- Decline or revoke push notification permission in iOS Settings.
- Use NARRA without any AI or enrichment features — they're off unless you add keys.
- Keep Read Statuses off (the default), or disable them at any time. The change applies to mail queued afterward.
- Request a copy or deletion of your data by emailing us.
Children
NARRA is not directed to children under 13 and we do not knowingly collect their data.
Contact
Onyx Dev Labs LLC · support@onyxdev.io