DoormanPrivacy Policy
Last updated: October 12, 2026
In short: Doorman is a mail app that runs on your Mac and iPhone. Your mail goes directly between your device and your mail provider, and is stored only on your device. We do not run a server that receives your mail, and we do not sell, share or advertise with your data. Data leaves your device only to the services listed below, and only for features you use.
1. Who is responsible
Kratzenstein Holding UG (haftungsbeschränkt) (“we”, “us”) publishes the Doorman app and this website. Contact: hello@get-doorman.com.
2. What Doorman does with your data
Doorman is client software. When you connect an account, the app signs in to your mail provider and downloads your mail to your device so it can show, search, summarize and organize it. This includes message headers and contents, attachments you open, folders and labels, and the people you correspond with.
- Stored on your device only. The mail cache is an encrypted database; its key, your passwords, sign-in tokens and API keys are kept in the Apple Keychain. We have no copy.
- Removing an account in Doorman's settings deletes its mail, insights and drafts from the device. Uninstalling the app removes the rest.
- No analytics, no tracking, no advertising. The app does not send usage statistics or crash reports to us.
3. Services Doorman talks to
The app connects directly from your device to the following services. Each one receives only what is listed, and their own privacy policies apply.
| Service | When | What it receives |
|---|---|---|
| Your mail provider (e.g. Google, Apple iCloud, Microsoft, others) | Always, for accounts you connect | Your sign-in, and the commands to read, organize and send your mail (IMAP, SMTP, OAuth). |
| Your AI provider (Anthropic or OpenAI, or a compatible endpoint you enter) | Only if you turn on AI features and add your own API key | For summaries, triage, the brief, reply drafts and the agent: the relevant messages (senders, recipients, dates, subject, cleaned message text), and the profile text you write in settings. Requests are made with your key and billed to you by that provider. |
| A spam-filter endpoint you configure (Laya classifier) | Only if you set one up | Sender, subject and the first part of the text of new messages, to score them. |
| Gravatar | Sender pictures (can be turned off) | A SHA-256 hash of the sender's address — never the address itself. |
| The sender's website and Google's favicon service; Cloudflare DNS | Company logos and BIMI logos (can be turned off) | The sender's domain name, never the address or mail content. |
| Cloudflare DNS and Mozilla's Thunderbird ISPDB | When you add an account by address | The domain of your address, to find its mail servers. |
| Remote images in a message | Only when you choose “Show images” | A request from your device to the image's server, as with any mail app. Blocked by default. |
On the Mac, Doorman can run a local MCP server for agents you install (for example Claude Code). It listens only on your computer, requires a token you hand out, and every message an agent wants to send waits for your approval. Agents you connect process data under their own terms.
4. Google user data
If you connect a Google account, Doorman asks for the scope https://mail.google.com/ (to read, organize and send your Gmail over IMAP and SMTP) and openid, email and profile (to know which account you connected). Doorman uses this data only to provide the mail features you see in the app, on your device.
Doorman's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- Google user data is not transferred to us. It is transferred to others only as needed for features you use — your AI provider when you use AI features, and a spam-filter endpoint you configure — or when required by law.
- It is never used for advertising, never sold, and never used to build, improve or train generalized artificial-intelligence or machine-learning models.
- No person at our company reads your Google data. The only exceptions would be with your explicit consent (for example, a message you forward to support), for security purposes, or to comply with the law.
You can revoke Doorman's access at any time in your Google Account settings.
5. This website
get-doorman.com uses no cookies, analytics or third-party scripts and keeps no access logs. Our server processes your IP address briefly to deliver the pages and protect them against abuse. If you email us, we use your message and address only to answer you and delete it when no longer needed.
6. Legal bases (GDPR)
To the extent we process personal data ourselves, we rely on Art. 6(1)(b) GDPR (providing the app and answering requests you make) and Art. 6(1)(f) GDPR (our legitimate interest in operating a secure website). Processing inside the app on your device is under your control.
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with a data protection supervisory authority. Because your mail data stays on your device, you can view, export and delete it there yourself. For anything else, write to hello@get-doorman.com.
8. Children
Doorman is not directed at children under 16.
9. Changes
We will update this policy when the app changes how it handles data, and change the date at the top. Material changes will also be announced in the app.