Privacy Policy — Lull

Introduction

At lost end found Ltd, we are committed to protecting your privacy. This Privacy Policy explains how Lull ("the App") handles your data.

The Short Version

Lull runs no servers and does not collect, sell, or transmit your data to lost end found. The App connects directly to Gmail using Google OAuth to read and send your mail. Your OAuth tokens are stored securely in your Mac's Keychain, and your mail is cached locally in a database on your Mac for offline access and search. There is no analytics, no telemetry, no tracking.

Data Collection and Use

No Data Collection by lost end found

We do NOT collect:

• Personal information or identifiers
• Usage analytics or telemetry
• The contents or metadata of your email
• Crash reports or diagnostics
• App usage patterns

Gmail Integration

Lull connects to the Gmail API using OAuth 2.0 (PKCE) with Google credentials you provide. This connection is established directly between your Mac and Google's servers — lost end found has no server in the middle and never sees your mail.

Local Storage

• OAuth tokens are stored in macOS Keychain.
• Mail content (messages, threads, attachments you've opened) is cached in a local database on your Mac, used to power offline reading and full-text search. This data never leaves your Mac.

Network Access

The App only communicates with:

• Google / Gmail API (googleapis.com) — to fetch, send, and manage your mail
• Google OAuth (accounts.google.com) — for secure sign-in

The App does not communicate with any lost end found servers or third-party analytics services.

Third-Party Services

Google

When you sign in to Gmail through the App, you are subject to Google's Privacy Policy. We recommend reviewing it to understand how Google handles your data.

No Analytics or Tracking

Lull does not integrate with any analytics services, crash reporting tools, or tracking SDKs. There are no cookies, pixels, or trackers.

Data Security

All communication with Google is encrypted using HTTPS/TLS. OAuth tokens are stored using macOS Keychain Services, which provides hardware-backed encryption on supported devices. Message bodies render inside a sandboxed WebView.

Children's Privacy

The App does not collect any personal information from anyone, including children. However, use of the App requires a Google/Gmail account, which has its own age requirements.

Your Rights

Lull's local mail cache and OAuth tokens live entirely on your Mac. You can remove them at any time by deleting the App or its data, or by revoking the App's access from your Google Account permissions. Since we run no servers, we hold nothing of yours to delete on our end.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page.

Contact Information

If you have any questions about this Privacy Policy, please contact us:

• Email: privacy@lostendfound.com
• Company: lost end found Ltd
• Registration: Company Registration No. 15713779
• Location: Registered in England and Wales

Summary

Lull connects you directly to Gmail using secure OAuth. Your tokens are stored in Keychain, your mail is cached locally for offline search, and lost end found runs no servers and collects no analytics or personal information.