Sonda privacy policy | Make It Crazy

Who is responsible

Sonda is made by Daria Zabiiaka, trading as Make It Crazy, in the Czech Republic (“I”, “me”, “Make It Crazy”). You can reach me at support.sonda@makeitcrazy.com.

Because Sonda keeps your mail on your device and I receive none of it, I do not collect or hold your personal data through the app. The sections below say exactly what happens, so you can check.

What Sonda handles, and why

When you connect an account, Sonda asks Google or Microsoft for permission, on their own sign-in page. Once you agree, it handles the following. “On your device” means it is not sent to me or to any third party.

Data	Why	Where it lives
Your email: messages, attachments, labels and folders, read state	To show, search, sort, send, archive, move and delete your mail	Moves directly between your device and Gmail or Outlook. A copy is cached on your device so the inbox opens fast and works offline. The cache is protected by iOS file protection and kept out of device backups.
Account details: your name, email address and profile photo	To show your profile and greeting, and to choose the “From” address when you write	On your device
Sign-in tokens	To keep you signed in without storing your password. Sonda never sees your password.	In the iOS Keychain on your device
Sorting results: the lane (Now, Later, Noise) and the reason shown for each email	To sort your inbox	Worked out on your device from the email itself. Nothing is uploaded for sorting.
Your choices: pins, starred senders, rules, folders, signatures, settings	To make Sonda work the way you set it up	On your device. Pins, starred senders and rules also sync between your own devices through your own iCloud account (Apple's key-value storage); I cannot read them.
Meeting invitations	When you tap Add, Sonda creates an event in your Apple Calendar	In your Calendar on your device, only after you allow it
App lock (Face ID, Touch ID or a Sonda passcode)	To lock Sonda when you leave it	Face ID and Touch ID are handled by iOS; Sonda never receives biometric data. A Sonda passcode is kept only as a salted hash in the Keychain on your device.

Sonda does not send your mail to any AI service. It has no advertising, no analytics, no crash-reporting service and no third-party code libraries.

Google user data and Limited Use

To work with Gmail, Sonda asks you to approve these Google permissions:

https://www.googleapis.com/auth/gmail.modify: read, compose, send, move, archive, trash, label and mark as read or unread the messages in your Gmail account. This is what a mail app needs to do its job.
Your basic profile (name, email address and photo), to set up your profile in the app.

Sonda's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In plain terms:

Sonda uses your Gmail data only to provide and improve the features you can see in the app: showing, sorting, searching, sending and organising your mail.
Sonda does not transfer your Gmail data to anyone. It travels only between your device and Google. Make It Crazy never receives it.
Your Gmail data is never used for advertising, including retargeting or interest-based ads, and is never sold.
Nobody at Make It Crazy reads your mail. It never reaches me. The only exception would be a message you choose to forward to me for support, with your agreement.
Your Gmail data is never used to develop, improve or train generalised artificial-intelligence or machine-learning models.

Microsoft accounts

Sonda supports Outlook and Microsoft 365 mail through Microsoft Graph, as Outlook sign-in becomes available. On Microsoft's own sign-in page you approve access to read and write your mail, send mail, and read your basic profile, plus the ability to stay signed in. The same rules apply as for Gmail: your mail goes only between your device and Microsoft, and I do not receive it.

Where it is stored, and how it is protected

On your device. The mail cache, drafts, folders, sorting results and settings are stored in Sonda's private storage on your iPhone or iPad. The mail cache uses iOS file protection and is kept out of device backups.
In the Keychain. Sign-in tokens and the app-lock passcode hash are kept in the iOS Keychain.
In transit. Sonda connects to Google and Microsoft over encrypted connections (HTTPS) only.
Safer reading. Pictures hosted on the internet are hidden inside an email until you tap Show, so senders cannot see that you opened it. Links open in Safari. No JavaScript runs inside an email.

No system is perfectly secure, and App lock cannot protect against someone who knows your device passcode.

Make It Crazy: nobody and nothing. Sonda sends me no mail, no account details, no usage statistics and no crash reports.

These companies handle data because of the services you already use, under their own policies:

Google and Microsoft: your mail provider, which holds your mail and receives the requests you make through Sonda. See the Google and Microsoft privacy policies.
Apple: the App Store and TestFlight, and iCloud if you use it, which syncs your pins, starred senders and rules between your devices. If you install a test version through TestFlight, Apple may share with me the crash reports and feedback you choose to send.

I do not sell your data, share it with advertisers, or send it to data brokers.

Notifications and permissions

Sonda may ask for permission to show notifications, to use Face ID, and to add events to your Calendar. Each is optional and can be changed in the iOS Settings app. Notifications are produced on your device when Sonda checks your mail, while the app is open and when iOS lets it check in the background. They are not sent through a server of mine. You can choose to show or hide the preview of each message.

If you contact support

Settings › Support opens a new message in Sonda's own composer, addressed to support.sonda@makeitcrazy.com, with the app version, iOS version and device model filled in so I can help faster. It is sent from your own mail account only when you press Send, and you can edit or delete anything first. I use what you send only to answer you and to fix the problem, and I normally delete the conversation within 12 months after it ends.

Removing your data and access

You are in control, and nothing of yours is held by me. To remove everything:

In Sonda, open Settings › Accounts and sign out of each account. Sonda forgets the account and its mail on that device.
Delete the Sonda app.
Revoke Sonda's access in your Google or Microsoft account. This ends Sonda's access everywhere, including on any other device where you signed in.

Step-by-step instructions, with the links to Google's and Microsoft's pages, are on the support page.

Your rights

If you are in the European Economic Area, the United Kingdom or a similar jurisdiction, you have the right to access, correct, erase, restrict and object to the processing of your personal data, and to data portability. You also have the right to complain to your data protection authority; in the Czech Republic that is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů).

Because Sonda keeps your data on your device and with Google or Microsoft, and not with me, there is usually nothing for me to access or erase: you can do it yourself in the app and in your provider's account settings. If you think I hold something about you, write to me and I will look into it and reply.

Children

Sonda is not directed at children. You need a Google or Microsoft account to use it, and those services set their own minimum age. I do not knowingly collect data from children, and through Sonda I collect no data from anyone.

Changes to this policy

If Sonda ever changes in a way that affects your privacy, for example a feature that sends mail off your device, I will update this policy before the change ships, tell you in the app, and ask for your permission first. The date at the top shows when this page last changed.

Contact

Questions about this policy or about your data: support.sonda@makeitcrazy.com.

See also the website privacy page, the terms of use, and support.