Privacy Policy — Lull
Last updated: June 2026
Introduction
At lost end found Ltd, we are committed to protecting your privacy. This Privacy Policy explains how Lull ("the App") handles your data.
The Short Version
Lull runs no servers and does not collect, sell, or transmit your data to lost end found. The App connects directly to Gmail using Google OAuth to read and send your mail. Your OAuth tokens are stored securely in your Mac's Keychain, and your mail is cached locally in a database on your Mac for offline access and search. There is no analytics, no telemetry, no tracking.
Data Collection and Use
No Data Collection by lost end found
We do NOT collect:
- Personal information or identifiers
- Usage analytics or telemetry
- The contents or metadata of your email
- Crash reports or diagnostics
- App usage patterns
Gmail Integration
Lull connects to the Gmail API using OAuth 2.0 (PKCE) with Google credentials you provide. This connection is established directly between your Mac and Google's servers — lost end found has no server in the middle and never sees your mail.
Local Storage
- OAuth tokens are stored in macOS Keychain.
- Mail content (messages, threads, attachments you've opened) is cached in a local database on your Mac, used to power offline reading and full-text search. This data never leaves your Mac.
Network Access
The App only communicates with:
- Google / Gmail API (
googleapis.com) — to fetch, send, and manage your mail - Google OAuth (
accounts.google.com) — for secure sign-in
The App does not communicate with any lost end found servers or third-party analytics services.
Third-Party Services
When you sign in to Gmail through the App, you are subject to Google's Privacy Policy. We recommend reviewing it to understand how Google handles your data.
No Analytics or Tracking
Lull does not integrate with any analytics services, crash reporting tools, or tracking SDKs. There are no cookies, pixels, or trackers.
Data Security
All communication with Google is encrypted using HTTPS/TLS. OAuth tokens are stored using macOS Keychain Services, which provides hardware-backed encryption on supported devices. Message bodies render inside a sandboxed WebView.
Children's Privacy
The App does not collect any personal information from anyone, including children. However, use of the App requires a Google/Gmail account, which has its own age requirements.
Your Rights
Lull's local mail cache and OAuth tokens live entirely on your Mac. You can remove them at any time by deleting the App or its data, or by revoking the App's access from your Google Account permissions. Since we run no servers, we hold nothing of yours to delete on our end.
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page.
Contact Information
If you have any questions about this Privacy Policy, please contact us:
- Email: privacy@lostendfound.com
- Company: lost end found Ltd
- Registration: Company Registration No. 15713779
- Location: Registered in England and Wales
Summary
Lull connects you directly to Gmail using secure OAuth. Your tokens are stored in Keychain, your mail is cached locally for offline search, and lost end found runs no servers and collects no analytics or personal information.