How we protect your mail.

Arsheen reads your email and texts to find bills, appointments and to-dos. That makes security the whole job. Here is, plainly, what we do.

What we keep, and for how long

The full text of a message is kept for 30 days (so you can open the original behind an item), then deleted automatically; a 300-character preview stays with the item. We never keep attachments. Items you accept stay until you delete them. Deleting your account removes everything at once and revokes our access at Google.

Encryption

Everything travels over TLS. At rest, message bodies and the Google/Microsoft access tokens are encrypted by the app itself (AES-256-GCM) before they reach the database, which is itself encrypted by Cloudflare. A copy of the database alone reveals nothing readable.

Access

You sign in with Apple or Google — we never see or store a password. Sessions expire after 90 days, or 30 days unused, and you can see every signed-in device and sign them out from Settings → Security. On your phone, Arsheen can lock itself behind Face ID / fingerprint. The beta is invite-only.

The AI

Messages are analysed by Anthropic's Claude API, which does not train on API data. We send only what is needed for one message at a time, never your whole mailbox.

Least privilege

Gmail access is read-only (plus Calendar/Tasks write only if you turn that on). Every request is checked against the signed-in user; there is no way to reach another account's data through the API. Admin actions and sign-ins are logged.

Abuse protection

Rate limits on sign-in and every endpoint, request size limits, strict input validation, security headers, and no error details leak to clients.

Your data is yours

Download everything we hold about you from Settings (a single JSON file), or delete it all with one tap.

Reporting a problem

Found a vulnerability? Email appleid.ardshir@gmail.com. We answer within 2 business days and won't take action against good-faith research. Machine-readable details: /.well-known/security.txt.

Arsheen is built and run by Dorost LLC, Kansas City. Infrastructure: Cloudflare (Workers, D1 in the US), Anthropic, Expo (push delivery), Firebase Cloud Messaging (Android push only, analytics off).