PRIVACY POLICY

 TEMPMAIL: SMART & SECURE MAIL - PRIVACY POLICY

App: TempMail: Smart & Secure Mail

1. INTRODUCTION

Welcome to TempMail: Smart & Secure Mail ("TempMail", "the App", "we", "our",

or "us"). TempMail gives you free temporary email addresses, so you can sign

up for a website or an app without using your real address. We respect your

privacy. This Privacy Policy explains what the App does with information, what

leaves your device, who receives it, and the choices you have.

BY INSTALLING OR USING TEMPMAIL, YOU AGREE TO THE PRACTICES DESCRIBED IN THIS

POLICY. IF YOU DO NOT AGREE, PLEASE DO NOT USE THE APP.

2. THE SHORT VERSION

- TempMail has no account of its own. You do not give us your name, your real

  email address, your phone number or your location.

- We do not run a server that receives your addresses or your mail. The

  temporary addresses are made and kept by a third-party mail service,

  mail.tm. The App talks to mail.tm directly from your phone.

- Your addresses, their passwords and your settings are stored on your device,

  in the App's private storage.

- The free App shows ads (Google AdMob), and uses Google Firebase Remote

  Config for settings. Those Google services collect the data described in

  Section 4.

- You can delete every address, and its mail, from inside the App (Settings >

  Delete everything).

3. INFORMATION THE APP HANDLES

3.1 YOUR TEMPORARY ADDRESSES AND YOUR MAIL (MAIL.TM)

When you tap "Create new email", the App asks mail.tm to make an address. It

sends mail.tm the address it chose and a random password it made. When you

sign in to an address you made earlier, the App sends mail.tm that address and

its password. Mail that arrives for the address is kept by mail.tm. The App

fetches it so you can read it, search it, mark it read or unread, delete it,

download its attachments and share it as an .eml file.

- Everything you see in your inbox comes from mail.tm. The senders of the mail

  are people and companies outside our control.

- We never receive a copy of your mail. How long mail.tm keeps an address and

  its mail is decided by mail.tm, under its own privacy policy and terms.

- The connection to mail.tm uses HTTPS.

3.2 STORED ON YOUR DEVICE

The App keeps the following in its private storage on your phone:

- the addresses you made or signed in to, with their passwords, so that you

  stay signed in and can switch between addresses;

- names you give to your addresses (labels);

- small notes about mail in your inbox, such as whether it was read and the

  verification code the App found in it;

- your settings (theme, app lock, hide screen content, clear copied codes,

  block trackers, mail alerts).

This data is protected by the Android app sandbox. It is not encrypted by the

App itself, so anyone who can open the App on your unlocked phone can see it.

You can turn on the App lock (Section 3.7) to prevent that. Uninstalling the

App, or clearing its storage in Android settings, removes this data.

3.3 ATTACHMENTS

When you tap an attachment, the App downloads it from mail.tm and saves it to

your phone's Downloads folder, where you and other apps with storage access can

see it. Opening it hands it to an app on your phone that can show that type of

file. We do not look at the file.

3.4 BACKUPS

"Back up addresses" turns your addresses into a piece of text that you share

yourself (for example to a notes app or a message to yourself). We do not

receive it. If you protect the backup with a password, it is encrypted

(AES-256-GCM, with a key made from your password). A backup without a password

contains your addresses and passwords as plain text: keep it somewhere safe.

"Restore addresses" reads such a text back into the App.

3.5 MAIL ALERTS AND NOTIFICATIONS

If you allow notifications and switch on mail alerts, the App checks your inbox

every few seconds while it is in the background, for 10 minutes after you

switch alerts on, and shows a notification when mail arrives. While it does,

Android shows a notification that the App is running ("Watching for new mail",

with the address being watched and the time the watch ends). The mail

notification can show the sender, the subject and a verification code found in

the mail. If you use

the App lock, it only says that mail arrived and hides even that on a locked

screen. The checks are made by your phone talking to mail.tm; nothing goes

through us.

3.6 CLIPBOARD

When you copy an address, a verification code or a link, the App puts it on the

clipboard. With "Clear copied codes" switched on (the default), the App empties

the clipboard again about a minute later. The App does not read what other apps

put on the clipboard.

3.7 PRIVACY FEATURES YOU CAN TURN ON

- App lock: asks for your fingerprint or screen lock when you open the App. This

  is done by Android. The App never sees your fingerprint, face or PIN.

- Hide screen content: blanks the App in the recent-apps view and stops

  screenshots and screen recording.

- Block trackers (on by default): shows mail without loading pictures from the

  internet and without running scripts, which is how senders see that a mail

  was opened.

4. INFORMATION COLLECTED BY THIRD-PARTY SERVICES

TempMail includes the following third-party services. They operate under their

own privacy policies. We do not send them your addresses, passwords or mail.

4.1 MAIL.TM

The mail service that makes and keeps your temporary addresses and the mail sent

to them (Section 3.1). It receives what is needed to run the address: the

address, its password, and your requests to read, delete or download mail. It

can see the content of mail sent to the address. Its privacy policy applies.

Website: https://mail.tm

4.2 GOOGLE MOBILE ADS (ADMOB)

Used to show banner, native, interstitial and app open ads. AdMob may collect

and use: the Advertising ID, IP address (and the approximate location it

reveals), device and operating system information, app diagnostics, and how you

interact with ads (impressions and clicks), for advertising, measurement, fraud

prevention and security. Learn more: https://policies.google.com/technologies/ads

4.3 GOOGLE USER MESSAGING PLATFORM (CONSENT)

Where the law requires it (for example in the European Economic Area and the

United Kingdom), a message asks for your choices about ads before any ad is

requested. The App does not request ads until the rules for your region allow

it. Where it applies, you can change your choice later in Settings > Privacy

options.

4.4 FIREBASE REMOTE CONFIG

Fetches settings for the App, such as which ads are switched on. Firebase

creates an installation identifier for the App on your device to do this, and

Google receives basic device and app information with each request. Your

addresses and mail are not part of these requests. Learn more:

https://firebase.google.com/support/privacy

The App does not use Firebase Analytics, and it does not contain code that

records your use of it for us.

5. PERMISSIONS AND WHY THE APP ASKS FOR THEM

- Internet and network state (INTERNET, ACCESS_NETWORK_STATE): to reach mail.tm,

  load ads and settings, and know when the connection is back.

- Notifications (POST_NOTIFICATIONS): to tell you when mail arrives. Asked for

  when you switch mail alerts on. You can refuse and still use the App.

- Foreground service (FOREGROUND_SERVICE, FOREGROUND_SERVICE_DATA_SYNC): to keep

  checking your inbox for 10 minutes while you use another app, when you ask for

  mail alerts. It stops by itself.

- Wake lock, vibrate, receive boot completed (WAKE_LOCK, VIBRATE,

  RECEIVE_BOOT_COMPLETED): added by the libraries that show notifications and run

  the mail check. The App does not watch your inbox by itself after the phone

  restarts.

- Storage (READ_EXTERNAL_STORAGE, WRITE_EXTERNAL_STORAGE): to save an attachment

  you chose into the Downloads folder on older versions of Android.

- Biometrics (USE_BIOMETRIC, USE_FINGERPRINT): for the optional App lock.

- Advertising ID (AD_ID) and ad services (ACCESS_ADSERVICES_*): used by the

  Google Mobile Ads SDK for advertising, measurement and fraud prevention.

You can review or withdraw any permission in Android Settings > Apps >

TempMail > Permissions.

6. DATA RETENTION AND DELETION

- Addresses and mail at mail.tm: deleted from mail.tm when you use Settings >

  Delete everything, which deletes every address in the App and its mail. If

  mail.tm cannot be reached at that moment, the App keeps the address so that

  you can try again.

- On your device: sign out of an address (menu > Sign out) to remove it from the

  App, or uninstall the App, or clear its storage in Android settings, to remove

  everything stored on the phone.

- Third-party services: data collected by Google AdMob and Firebase is kept under

  Google's own retention schedules. You can reset or delete your Advertising ID

  in Android Settings > Google > Ads.

- Because we do not hold your addresses or your mail, there is nothing of that

  kind for us to delete on our side.

7. SECURITY

- Traffic between the App and mail.tm, and the Google services it uses, is sent

  over encrypted connections (HTTPS / TLS).

- Backups can be protected with a password (AES-256-GCM, PBKDF2 key).

- The App can hide its content in the recent-apps view and ask for your

  fingerprint or screen lock.

- Temporary addresses are not private mailboxes. Anyone who knows an address

  and its password can read its mail, and mail.tm can see the mail. Do not use a

  temporary address for anything you could not afford to lose or for anything

  confidential.

No method of storage or transmission is completely secure, and we cannot

guarantee absolute security.

8. YOUR CHOICES AND RIGHTS

- Mail and addresses: you can read, delete and back up them from the App, and

  delete everything from Settings.

- Ad consent: where the consent message applies, you can change your choice from

  Settings > Privacy options.

- Advertising ID: you can reset or delete it in Android Settings > Google > Ads,

  and turn off ads personalisation there.

- Permissions: you can withdraw any permission in Android Settings.

- Depending on where you live (for example under the GDPR, UK GDPR, CCPA/CPRA or

  similar laws) you may have rights to access, correct, delete or restrict the use

  of personal data, or to object to it. Because we do not keep an account or any

  of your content, most of this data sits with mail.tm and Google; you can use

  their privacy tools, and you can contact us with any request using the details

  in Section 12.

9. CHILDREN'S PRIVACY

TempMail is not directed to children under 13 (or under 16 in the EEA), and we

do not knowingly collect personal information from children. If you believe a

child has provided personal data through the App, contact us and we will help

resolve it.

10. WHERE DATA IS PROCESSED

mail.tm and Google process data in the countries where they operate, which may

be outside your country. Their policies describe the safeguards they use.

11. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. When we do, we will change

the "Last Updated" date at the top. Please review it from time to time. Using

the App after an update means you accept the updated policy.

12. CONTACT US

Questions or requests about this Privacy Policy:

TempMail Support Team

Email: sigma.game.developers@gmail.com