What Pimkin is
Pimkin connects to the mail, calendar, contacts, and tasks accounts you already have, such as Gmail, Microsoft 365, iCloud, Fastmail, Zoho Mail and other standard accounts, and gives you one place to work with them. Your providers keep your accounts; Pimkin does not replace them.
Outbound mail is sent through your own provider, using your own credentials. Pimkin does not run a mail-sending service of its own.
What Pimkin keeps, and how it’s protected
Your mail, calendars and contacts stay with your providers. To search all your accounts at once, and to let the apps keep working offline, Pimkin keeps a synced copy of them.
That copy is encrypted on disk. Message details, calendar events, contacts and tasks are kept in a database hosted by Render. Full message bodies, attachments and contact photos are kept in file storage at Cloudflare. Both encrypt everything they store with AES-256, and the database’s backups are encrypted too.
The passwords and sign-in tokens that let Pimkin reach your accounts get a second layer of protection: Pimkin encrypts them itself, with a key that only the service holds and that is never included in any app you download.
The copy is there only to show your data back to you. It is never sold, never used for advertising, and never read by a person unless you ask for help with something specific.
When you create a Pimkin account, Pimkin notes the country your connection came from, as Cloudflare reports it, so the operator can see where sign-ups come from. Only the country is kept: not your IP address, your city or your location. If you used a VPN, it is the VPN’s country. It is visible only to the service’s administrators, it is never updated afterwards, and it is deleted with your account.
Remove an account and everything synced from it is deleted. Delete your Pimkin account and all of it is deleted. Your providers keep the originals either way.
Who can see your data
Pimkin is operated by ganshiki, and more than one person may have an account on the service. Your data is not shared with them.
Every request is scoped to the account that made it. Other people using Pimkin cannot see your mail, calendar, contacts, or tasks, and there is no shared or cross-account view of any of it. The spam filter learns only from your own messages and is never pooled with anyone else’s.
Administrators of the service can manage accounts — send invitations, enable or disable an account, change its role, sign it out, delete it, and see aggregate counts like how many accounts exist. They cannot read your mail, calendar, or contacts: no part of the administration tooling exposes another person’s content.
Running a hosted service does mean ganshiki holds the infrastructure your synced data sits on. That access exists to operate, secure, and support the service — not to read your mail. Nobody reads your content except you, unless you explicitly ask for help with a specific problem, the law requires it, or it is genuinely necessary to investigate abuse or a security incident.
What Pimkin does not do
No ads. No profiling. Your data is never sold, rented, or mined to build a profile of you.
Message bodies and attachments are stored so Pimkin can give you full-text search across every account. They are not end-to-end encrypted — they are protected by per-account access controls, by encryption on disk, and by encryption of the credentials that reach your providers. End-to-end body encryption is intentionally out of scope, because it would make search and the optional AI features impossible.
Google data — Limited Use
Pimkin’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Concretely: your Google data is used only to provide the features you can see in the app. It is never sold, rented, or transferred to anyone; never used for advertising or to build advertising profiles; and never used to train generalized or machine-learning models. The same commitments apply to data from every other provider you connect.
Files from Google Drive and OneDrive
If you choose to, you can attach a file from your Google Drive or OneDrive to a message. To show you your files, Pimkin asks Google for permission to read your Drive and Microsoft for permission to read your OneDrive. You give that permission once per account, from the compose window, and you can take it back at any time from your Google Account or Microsoft account permissions.
Pimkin lists your files only while you are choosing one, and does not keep the list. It copies only the file you choose, and only when you attach it as a copy; that copy is then kept like any other attachment on the message. If you insert a link instead, Pimkin copies nothing and does not change who can open the file. Pimkin never changes, moves, shares, or deletes anything in your Drive or OneDrive.
Optional AI features
Pimkin offers optional AI features — inbox triage, message summaries, and reading travel or booking details out of a confirmation email so you can add them to your calendar. Each is off by default, and each has its own switch. Nothing about your mail is sent to an AI provider unless you turn one on.
When you do enable one, the relevant message content — sender, subject, and a length-limited excerpt of the body — is sent to Anthropic to produce the triage label, the summary, or the booking details, and the result is returned to you. Your passwords, sign-in credentials, and attachment files are never sent. Your data is not used to train any model. Turn the features off and nothing more is sent.
One further feature works differently and is worth stating plainly: you can describe a mail rule in your own words and have Pimkin draft it for you. What you type in that box is sent to Anthropic to be turned into a rule. Your messages are not — only the sentence you wrote. That box appears whenever the AI provider is configured rather than behind its own switch, so unlike the three above it is not off by default; nothing is sent unless you type in it and ask for a draft.
Siri on iPhone
On iPhone you can ask Siri — or use the Shortcuts app, Spotlight, or CarPlay — three read-only questions about your Pimkin data: how many unread messages are in your Inbox, what your next meeting is, and what your latest mail is. Siri can only read. It cannot send, delete, archive, or change anything.
To answer, Pimkin uses a separate read-only key that the app keeps on your iPhone. It works only for those questions, it appears under Settings → Sessions where you can switch it off, and signing out of the app removes it.
The unread count can be answered while your iPhone is locked. Anything that says who wrote to you, what about, or what is on your calendar needs your iPhone unlocked first. The text of your messages is never given to Siri. If you have turned on message summaries, the latest-mail answer includes each message’s AI summary, produced exactly as described above.
Your spoken questions, and the answers Siri reads or shows, are processed by Apple under Apple’s own privacy terms and may appear in your Siri & Dictation history. Apple may also use the phrases and titles Pimkin registers for these shortcuts, in anonymized form, to improve Siri. You never have to use Siri; Pimkin works the same without it.
Joining the Android test
If you ask to join the Android test on the Download page, Pimkin stores the email address you enter and, if you give one, your name. Nothing else is kept with it: not your IP address and not your browser. Only the operator sees these requests.
They are used for one thing: adding you to the test. The operator adds your address to the tester list in the Google Play Console, so Google receives it under Google’s own terms, and Pimkin sends you one email with the link to accept. You won’t get anything else from it.
A request that is declined is deleted. Once you’ve been added, the request is kept as the record of who was invited until you ask for it to be removed; write to the address under Contact and it will be deleted, and you’ll be taken off the tester list.
Where it runs, and who else is involved
Pimkin is hosted by Render; files are stored with Cloudflare, which also carries Pimkin’s network traffic. Connections to the service are encrypted in transit.
Those are the only companies that handle your data on Pimkin’s behalf, alongside the providers whose accounts you asked Pimkin to sync — and Anthropic, only if you use one of the AI features described above. There are no analytics, advertising, or tracking services anywhere in Pimkin. Only Pimkin’s hosted service connects to your providers; the apps you install never hold your provider credentials.
The desktop app keeps a local copy on your computer so you can work offline. Your account passwords stay with the Pimkin service and never reach your computer; the app’s own sign-in is kept in your operating system’s keychain.
Your control
You connect accounts, and you can disconnect them. Removing an account under Settings → Accounts deletes that account and everything synced from it — mail, calendar, contacts, and tasks. Removing the last account for a provider also revokes Pimkin’s access with that provider, so the grant is torn down upstream and not just locally.
Microsoft does not offer that revocation programmatically; to revoke there, remove Pimkin from your Microsoft account’s app permissions. You can always revoke Pimkin’s access directly from your Google Account permissions page, independently of anything Pimkin does.
If you don’t use Pimkin for 30 days — no sign-in, and no activity from the app on your phone or watch — Pimkin may pause syncing your accounts until you’re back. Nothing is deleted, and syncing resumes on its own the next time you sign in or open the app.
Deleting your Pimkin account removes your data from the service entirely. And because Pimkin is a client, your mail and calendars continue to live with your providers exactly as before — there is no migration and no lock-in.
Contact
Questions about how Pimkin handles your data, or a request about your account? Email support@pimkin.app.
Changes to this page
This is Pimkin’s privacy policy — written in plain language on purpose, but meant to be relied on. It will be updated as the product changes, and material changes are reflected in the “last updated” date above. The terms governing your use of Pimkin are on the Terms page.