Last updated: February 2026
When you sign in with Google, we receive your email address and a refresh token that allows kthx to access your Gmail on your behalf. We store your email classification categories and handler configurations in Google Cloud Firestore.
When a new email arrives, kthx reads the sender, subject, and body to classify it against your categories using Google's Gemini AI. Email content is sent to the Gemini API for classification and is not stored by kthx after processing. We do not read, store, or share the content of your emails beyond what is needed for real-time classification.
Your account data (email, categories, handler configurations) is retained as long as your account is active. Processed message IDs are stored for deduplication. You can request deletion of all your data by contacting us.
OAuth refresh tokens are encrypted at rest using AES-256. All data is stored in Google Cloud with encryption at rest and in transit. Access to production systems is restricted to authorized personnel.
You may request access to, correction of, or deletion of your personal data at any time. You can revoke kthx's access to your Gmail account via your Google Account permissions.
For privacy questions or data requests, email [email protected].