Privacy policy.

Connected accounts

Zephyr connects from your Mac to the accounts you choose. You don’t need a separate Zephyr account. Your mail, calendar and contacts aren’t uploaded to a Zephyr server.

• Mail. Zephyr uses your account address, messages, attachments, folders or labels and message status to show and search mail, keep an offline cache and carry out actions such as sending or moving messages. Gmail uses Google sign-in. iCloud Mail uses an app-specific password. Exchange Online uses Microsoft sign-in and Microsoft Graph for your connected work or school mailbox.
• Calendar. Zephyr uses calendar and event details, attendees and availability to display your schedule, look for free time and make the event changes you request. It uses Google Calendar or Microsoft Graph, depending on the account you connect.
• Contacts. Zephyr uses contact details such as names, email addresses, phone numbers, groups and photos to display and edit contacts and suggest recipients. Google Contacts data comes from Google and Exchange Contacts data comes from Microsoft Graph. Access to contacts on your Mac is controlled by macOS.
• Work directory suggestions. If you enable this for an Exchange or Google Workspace account, Zephyr sends partial names or addresses you type in recipient and event guest fields to that account’s provider and displays the matches. Zephyr does not save these directory search results to its contact cache.

Connecting an account is optional. Zephyr needs the relevant permissions to provide that account’s features. Google, Apple and Microsoft process requests to their services under their own policies. Google privacy policy · Apple privacy policy · Microsoft privacy statement

Zephyr uses information from Google APIs for the features described here. Zephyr doesn’t sell this information, use it for advertising or use it to train general-purpose AI models. The use and transfer of this information are subject to the Google API Services User Data Policy, including its Limited Use requirements.

Local storage and optional iCloud sync

Zephyr encrypts its local mail cache, downloaded attachment cache, saved drafts, calendar cache, summaries and suggested replies. Mail credentials and cache keys are kept in your Mac’s Keychain. When you enable S/MIME for a message, Zephyr encrypts its body and attachments before sending. Subject lines and email addresses remain visible for delivery.

If you enable iCloud sync in a build that supports it, Zephyr sends your account list and selected preferences to your iCloud account so they can follow you between Macs. This sync doesn’t include mail credentials, message content or the local cache.

AI features

Optional email summaries, time-sensitive highlights and suggested replies use Apple Intelligence on your Mac. The assistant can also use Apple Intelligence locally. If you enable Search Connected Inboxes, Zephyr sends search terms to the connected mail providers.

When you select OpenAI, Zephyr shows a dialog explaining what will be shared. Sharing starts only after you choose Allow and Enable OpenAI and add your own API key. When you ask the assistant, Zephyr sends your question, recent chat and relevant context directly to OpenAI to answer your request. This can include message and draft text, names and email addresses, attachment names, search terms, calendar event details and contact information from your connected accounts. Zephyr stores your API key in your Mac’s Keychain.

Zephyr asks OpenAI to disable response storage. By default, OpenAI may retain API prompts and responses in abuse-monitoring logs for up to 30 days, subject to the exceptions described in its API data controls. OpenAI does not use API data for model training by default.

To withdraw consent, open Zephyr Settings, select Assistant & AI and choose Turn Off OpenAI. This stops future OpenAI requests from Zephyr and switches the assistant back to Apple Intelligence. Choose Remove OpenAI Key to delete the key from your Mac as well. Use your OpenAI account controls or contact OpenAI about information it already holds.

External links and contact icons

Zephyr’s email reader blocks remotely hosted images in messages. If you turn on website icons for contacts without a photo, Zephyr can request an icon directly from the website associated with an email address’s domain. That website can see ordinary connection information such as your IP address. Zephyr doesn’t send it the full email address or message content for this request.

Links you open from mail or from this site go to the destination you choose. Those sites apply their own privacy practices.

Retention and your choices

• Manage how much mail Zephyr keeps offline in Settings under Storage & Sync. Remove an account in Settings to remove its saved credentials and account cache from Zephyr. This doesn’t delete the originals held by your provider. You can delete your local drafts separately.
• Revoke Zephyr’s Google access in your Google Account connections. Revoke an iCloud app-specific password in your Apple Account settings, or change Contacts access in macOS Privacy & Security.

Website and support

The Zephyr website has no advertising or analytics scripts. Your browser can store your selected colour theme locally. When the site is served through Cloudflare, Cloudflare can process IP addresses and request information to deliver and protect it. Cloudflare privacy policy

If you email Zephyr support, your email address and what you choose to include are used to reply and help with your enquiry. You can ask for help without sharing mailbox contents or screenshots.