Privacy policy
Effective October 16, 2026
Post is a personal desktop email client maintained by Casey Foster. It uses your email data to provide the mail features you choose in the app. This policy covers Post and its public information pages at post.yourprogress.app.
Information Post accesses
When you connect a Google account, Google asks you to authorize Post to read, compose, and send Gmail. The Gmail permission also supports actions such as marking messages as read, changing labels, archiving, and moving mail to Trash.
Post accesses your mailbox address, message headers and contents, recipient addresses, labels, and attachments as needed for these features. Each account has a separate authorization. Google account passwords are entered on Google's sign-in screens.
How the information is used
Mail data is used for your inbox, search, message reading, attachments, composing and sending, mailbox actions, local drafts, and reminders. Post communicates directly with Google's APIs, or with the mail servers you configure for an IMAP/SMTP account.
Post's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Storage and protection
Account authorizations, cached messages, local drafts, and settings are stored in an encrypted file on your computer, protected using operating-system encryption. OAuth tokens stay in the desktop app's privileged process and are excluded from the mail interface's account data.
Attachments you save, messages you print, and mail you export are written to the destinations you choose. Those copies are governed by the security and retention of that destination. Your operating system or backup software may also retain copies of local app data.
Sharing and external services
Post has no hosted mailbox server. Mail content and account tokens are not uploaded to Progress or this website. Post does not sell email data, use it for advertising, send it to AI services, or include desktop analytics or telemetry.
Sending an email shares its contents and attachments with your chosen recipients through your mail provider. Links you open use your browser and the destination website's policies. Remote email images, scripts, and tracking requests are blocked in Post's message viewer.
Retention and your choices
Local mail data is retained while its account is connected. Removing an account in Post removes its credentials, cached messages, and drafts from the active local vault. Your mail remains with your provider. Existing exports, downloaded attachments, printed copies, and backups are separate.
You can revoke Google's authorization at any time through Google Account connections. Removing an account from Post and revoking its Google authorization are separate actions.
This information website
These pages describe the app and do not connect to your mailbox. The hosting and network providers may process standard request information, such as IP addresses and browser details, to serve and protect the website. No mailbox data is needed to view these pages.
Contact and updates
For privacy questions or help removing local Post data, email caseylfoster87@gmail.com. This policy will be updated here if Post's data practices change.