Privacy Policy

Personal information we collect

The personal information we collect depends on how you interact with the Service.

1. Information you provide to us

Contact data

Your name, email address, phone number, mailing address, company information, or any other details you share with us.

Account data

Email address, password, preferences, and optional profile details used to create or access your Dove account.

Email account data

When you connect an email account (e.g., Gmail, Outlook), we collect authentication tokens and data accessible from that account, including:

• Email content (body, subject lines, headers, timestamps)
• Email attachments
• Metadata (e.g., when you read or archive an email)
• Account-level details (profile photo, language settings, etc.)

This data is stored on your device and is never sold or used for advertising.

Contact data

Names, email addresses, and metadata stored in your provider’s address book, used only for:

• Auto-complete suggestions
• Smart contact search
• Recipient recommendations

We do not use your contacts for marketing.

Calendar data

If you connect a calendar, we collect authentication tokens and event information (titles, times, attendees, RSVP status, links, notes) required to show and manage calendar events.

Payment data

If you purchase a subscription, payment information is processed by secure third-party processors (e.g., Apple, Stripe). We do not store your full payment card details.

Communications data

Information you share when you contact support, provide feedback, report bugs, complete surveys, or interact with us on email or social channels.

Referral data

Details of individuals who invite you to Dove or whom you invite to the Service.

2. Information collected automatically

Device data

Operating system, device model, browser type, IP address, unique identifiers, carrier, and general location (e.g., city or region).

Usage data

App interactions, screens viewed, search queries, time spent, performance logs, diagnostics, crash data, and email engagement signals (e.g., open events).

Web technologies

We use:

• Cookies
• Pixels/web beacons
• Local or native storage
• Embedded scripts
• SDKs for analytics, error logging, and system performance

These are used only to operate and improve the Service not for advertising.

3. Information from third-party sources

If you enable third-party integrations (e.g., cloud storage, authentication providers, or AI features), we receive only the data necessary to power those features according to each provider’s permissions.

AI & ML Features

Dove uses AI to summarize, write, classify, and help you manage emails efficiently. Your data is never used to train third-party AI models.

1. On-device personalized ML

Some features (e.g., Smart Inbox) rely on machine-learning models stored and trained locally on your device:

• Only you can access your model
• Training data never leaves your device
• Data is not shared with third parties

2. Cloud-hosted AI models (LLMs)

For advanced tasks like drafting replies and refinement, summaries, chat assistance etc. Dove may send text snippets to trusted third-party AI providers, and the platforms that host their models, under agreements that bar them from training on your data.

We ensure:

• Providers do not use your data to train or improve general models
• Providers adhere to strict privacy and security requirements
• Only the minimal required text is shared

3. Google API Limited Use Compliance

Dove’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. This covers all Google user data Dove receives, including Gmail, Google Calendar and Google Contacts data.

Meaning:

• Dove uses Google user data only to provide and improve the user-facing features you use in Dove
• Dove does not transfer Google user data to others except as needed to provide or improve those features, for security, to comply with applicable law, or as part of a merger, acquisition or sale of assets
• Dove does not use Google user data for advertising, including personalized ads, retargeting or interest-based ads
• Dove does not sell Google user data, or transfer it to data brokers or information resellers
• No person at Dove reads your Google user data unless you give us permission for specific messages or events, it is needed for security (such as investigating abuse), it is needed to comply with applicable law, or it has been aggregated and anonymized for internal operations
• Dove does not use Google user data, or allow it to be used, to develop, improve or train generalized or non-personalized AI or machine-learning models

Google User Data: Access, Use, Sharing, Storage & Deletion

1. Google Data We Access

Based on the permissions you grant, Dove may access:

• Gmail: emails (subject, body, attachments, headers, timestamps), metadata (labels, threads, message IDs), drafts, send/receive activity, contacts, and basic profile info.
• Google Contacts: contact names, email addresses, profile photos, group associations, and metadata necessary to power contact-related features.
• Google Calendar: the list of calendars in your Google account, and the events on them: title, description, date and time, location, attendees and their responses, conferencing links, reminders, repeat rules and related metadata. With your permission, Dove can also create, change and delete events and answer invitations on your behalf.

We only access what’s needed to provide the features you use.

2. How We Use Google User Data

We use your data solely to deliver email and productivity features, including syncing emails, sending/receiving messages, organizing mail, managing contacts, and powering AI features (summaries, suggested replies, classification).

Google Calendar data is used to:

• Show your calendars and events in Dove, and keep them in sync when they change
• Create, change or delete events and answer invitations when you ask, either in the calendar or through Ask Dove. Ask Dove shows you each change and makes it only after you approve it
• Find free time in your schedule when you ask
• Connect invitation emails to the events they are about

We never use Google data for ads, marketing, selling, training AI models, or for anything outside the permissions you granted.

3. If and How Google Data Is Shared

We do not share Google data except:

• With Google services (e.g., syncing Gmail/Calendar/Contacts changes), or
• With the third-party AI providers that run Dove’s AI features, only when you use one of those features. For example, when you ask Ask Dove about your calendar or describe an event in words, the relevant event details (such as title, time, attendees and description) are sent to answer that request, or
• With contracted service providers who host and operate Dove’s infrastructure.

All providers are bound by strict confidentiality, cannot use your data for training, and may only process it to provide the requested functionality. We never transfer Google data for unrelated purposes.

4. Storage & Protection of Google User Data

We use industry-standard security practices: encryption in transit and at rest, access controls, audit logging, and data minimization. Email content is stored locally when possible; limited metadata may be stored securely on our servers. Calendar events are stored on your device. They pass through our servers, encrypted in transit, on their way to and from Google, and are not stored there; to deliver change notifications, our servers keep only the identifiers of your calendars. We never store your Google passwords - authentication uses OAuth 2.0.

5. Data Retention & Deletion (Google-Specific)

You can revoke Dove’s Google access anytime at: https://myaccount.google.com/permissions

You can also remove an account from Dove at any time. Once access is revoked or the account is removed, tokens are deleted, local Google data (including calendar events stored on your device) is removed, calendar change notifications are stopped, and any server-side data is erased within 30 days unless legally required. You may request full account deletion by emailing hey[at]dove.email, and we will delete all Google user data unless retention is required by law.

How we use your personal information

We use your information for:

• Service delivery: Operate Dove, sync accounts, process emails and events, personalize features, and send essential notifications.
• Business operations: Maintain infrastructure, monitor performance, diagnose issues, and ensure security.
• Product Improvement: Analyze usage patterns, improve features, develop new capabilities, and generate de-identified or aggregated insights.
• Marketing: Send promotional emails or product updates if permitted by law. You may opt out anytime.
• Compliance and protection: Comply with laws, respond to lawful requests, enforce our Terms of Service, and prevent fraud or misuse.

How we share your personal information

We do not sell your personal data. We may share information with:

• Your email/calendar providers: Actions you perform in Dove (send, reply, delete, archive) are reflected in your provider’s system.
• Service providers: Vendors who support hosting, analytics, error logging, customer support, payment processing, and AI features. Service providers are prohibited from using your data to train their own AI models.
• Payment processors: For subscription processing (e.g., Apple, Stripe).
• Authentication services: If you log in using Google or similar services, they may receive device or login data under their policies.
• CAPTCHA services: Used to prevent abuse (e.g., Google reCAPTCHA).
• Affiliates & Advisors: Entities under common control with Dove, and professional advisors like lawyers or auditors.
• Legal Requests & Protection: When required by law or necessary to protect rights, security, or integrity.
• Business transferees: In case of mergers, acquisitions, financing, or transfer of assets.

Your choices

• Disconnect your email or calendar account: You may remove an account from Dove at any time, or revoke Dove’s access through your email or calendar provider’s settings.
• Access or update data: You may update account information in Dove settings.
• Opt-out of marketing: Use the unsubscribe link in our emails or contact us.
• Request account deletion: Email us at hey[at]dove.email to delete your Dove account and associated data.
• Authentication controls: Limit what third-party login services (e.g., Google) share via their settings.
• Cookies and Do Not Track: Most browsers allow cookie blocking. Dove does not currently respond to Do Not Track signals.

GDPR Rights (for EU Users)

If you are in the EU, you have the right to:

• Access your personal data
• Understand how it is processed
• Correct inaccurate data
• Request deletion (where applicable)
• Restrict or object to processing
• Data portability
• Lodge complaints with your local Data Protection Authority

Security and retention

We use technical and organizational measures to protect your information, but no system is completely secure. We retain information only as long as needed for service delivery, legal obligations and security or compliance purposes.

International data transfers

Cartasec Pte Ltd is headquartered in Singapore and may process data in Singapore, United States, Europe and other countries where service providers operate. Safeguards (e.g., SCCs) are applied when required.

Children

Dove is not intended for use by individuals under 18. If you believe a child’s information has been collected improperly, contact us and we will delete it as required by law.

Changes to this Privacy Policy

We may update this Privacy Policy periodically. The “Effective Date” indicates when it was last revised. Continued use of the Service constitutes acceptance of updated terms.

How to contact us

If you have questions or concerns about this Privacy Policy or our practices, please contact us at hey[at]dove.email.