Privacy policy
Your email stays on your PC.
Last updated: October 14, 2026. Meridian Mail is a Windows desktop email app. This page explains exactly what it stores, what leaves your computer, and why.
| Who we are | Meridian Mail is made by an independent developer. Contact: info@meridianmail.store. |
|---|---|
| Where your email is stored | Your messages, attachments, search index and Meridian's AI memory index are stored only on your computer, in your Windows user profile (%LOCALAPPDATA%\MeridianMail). Meridian has no server that stores your mailbox. |
| Connecting to your mail | Meridian connects directly from your PC to your email provider (for example Microsoft, Google, or your company's mail server) using standard IMAP and SMTP. For Microsoft accounts whose organisation turns off SMTP, Meridian sends through Microsoft's official mail API (Microsoft Graph) instead. |
| Passwords and sign-in | Passwords and sign-in tokens are encrypted with Windows data protection and can only be read by your Windows user account. With "Continue with Microsoft" or "Continue with Google", you enter your password on Microsoft's or Google's own page; Meridian never sees it. Meridian asks only for permission to read and send mail for the account you sign in with. |
| Google user data | Meridian's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to show, search, send and (when you ask) summarise your own email inside the app. It is never sold, used for advertising, or used to train AI models. |
| AI features | AI features are optional and run only when you use them, or for senders you have turned automatic summaries on for. The text needed for that request (for example the email you selected, your question, and related emails from your mailbox) is sent over an encrypted connection to Meridian's AI service, which passes it to Anthropic's Claude to generate the answer. Meridian's AI service does not store or log the content of your requests. Anthropic processes it under its commercial API terms and does not use it to train its models by default. |
| Usage limits | To enforce fair-use AI limits, Meridian's AI service keeps request counts linked to a random installation ID, a one-way hash of your license key (if you have one) and your IP address. These counters contain no email content and expire automatically within 40 days. |
| Images inside emails | Like any email app, images inside a message load from the sender's servers, which can tell the sender the email was opened. Meridian can block remote images and lets you allow them per message or per sender. |
| Payments and licenses | Purchases are processed by Lemon Squeezy, our payment provider and merchant of record. Meridian never sees your card details. The app checks your license key with Lemon Squeezy to activate Pro features. |
| Diagnostics | Meridian writes error logs on your computer to help troubleshooting. They are not sent anywhere unless you choose to share them with support. |
| Update checks and install count | The website version of Meridian checks meridianmail.store/version.json when it starts and once a day to see whether a newer version exists. Unless you turn off "Count this install anonymously" in Settings, that request includes a random install number made on your PC (different from the AI usage ID) and the app version, so we can count how many installs are active and which versions they run. Like any web request, our website host also sees your IP address. No name, email address, account or mail content is sent. Updates install only after you click "Update now", and only if the downloaded file matches its published SHA-256 fingerprint. |
| Website | This website may use privacy-friendly analytics to understand traffic and downloads. |
| What we never do | We do not sell your data, show ads, read your email, or use your email to train AI models. |
| Removing your data | Uninstall Meridian and delete the %LOCALAPPDATA%\MeridianMail folder to remove everything stored on your PC. You can revoke Meridian's access at any time from your Google account, Microsoft personal account or Microsoft work account settings. To delete license or usage records, email info@meridianmail.store. |
| Changes | If this policy changes, we update this page and the date at the top. |
Contact
Questions about privacy
Email info@meridianmail.store. Please don't send passwords or private email content.
In short
- Your mailbox is stored only on your PC.
- Passwords and tokens are encrypted on your PC.
- AI sees only what you ask about, and it isn't stored.