Your data

Last updated November 7, 2026

The short version: the Atdig app runs on your devices and talks to your email provider itself. atdig.com, our servers, never sees your mail. If you sync, what syncs is encrypted on your devices with a key only they hold, so atdig.com stores it but can't read it. What atdig.com can read is your account (your email address, plan, Dig credits and linked computers) and, when the app checks for updates, your IP address and version. (Cloud, coming later, is different: see below.)

Two parts: the app, and atdig.com

The Atdig app runs on your computer (and later your phone). Your mail, everything it works out about it, and your passwords and keys live here.
atdig.com is our servers: this website, your account, sync, the AI keys we give your computers for Dig credits, and the app's downloads and updates. Some of what it holds we can read; what syncs is sealed, and we can't.

In the Atdig app, on your devices

What	Where
Your email	The app reads it straight from your email provider (IMAP, or Fastmail's JMAP) and keeps an index of it, and a copy of the messages as far back as you choose, on your computer.
What the app works out	Classifications, your rules and decisions, the local AI's answers, the activity log, package tracking, search. All on your computer.
Passwords and keys	Your email passwords and tokens, your own AI keys, your computer's link to your account, and your sync key are kept in your system's keychain (macOS Keychain, Windows Credential Manager, or your Linux keyring). On Linux without a keyring, they're in a file only your user can read.

The app doesn't encrypt its own files on your computer; your device's disk encryption (BitLocker, FileVault) protects them, as it does your other files. Your passwords and keys never sync and never reach atdig.com: a new device asks for its own email passwords and AI keys.

From the app straight to others, never through atdig.com

Who	What they get
Your email provider	The app connects to it directly, as any mail app does, and moves, labels or archives mail only as your rules and actions say.
An outside AI, if you turn one on	For each email it checks: the sender, subject and the start of the message (for mail a person wrote, the headers only), with what the app knows of the sender. It goes straight to the AI company with your own key, or to OpenRouter, which passes it on. With Dig credits too: atdig.com gives your computer a short-lived OpenRouter key of its own, so the request goes straight from your computer to OpenRouter. atdig.com sees how much each key spent, never what was sent. Requests ask for providers that don't keep or train on what they're sent.

Who

What they get

Your email provider

The app connects to it directly, as any mail app does, and moves, labels or archives mail only as your rules and actions say.

An outside AI, if you turn one on

For each email it checks: the sender, subject and the start of the message (for mail a person wrote, the headers only), with what the app knows of the sender. It goes straight to the AI company with your own key, or to OpenRouter, which passes it on. With Dig credits too: atdig.com gives your computer a short-lived OpenRouter key of its own, so the request goes straight from your computer to OpenRouter. atdig.com sees how much each key spent, never what was sent. Requests ask for providers that don't keep or train on what they're sent.

What atdig.com can read

What	Why
Visits to this website	Our web server's log: your IP address, the page, your browser's name and the page you came from. Only to count visitors and downloads; no cookies or tracking scripts; deleted after 30 days.
Update checks and downloads	Once a day, the app asks download.atdig.com whether there's a new version, and downloads it if there is. That's us: we see your IP address and your version, nothing else, logged and deleted after 30 days. You can turn the check off (⚙ → Updates). Downloading the app from this site is the same.
Your email address	To sign you in: we send a code each time, no password. Sign-in is run on Amazon Cognito. Only if you make an account.
Your plan, and your Dig credits	What you have, what's set aside on your computers' AI keys, and how many were used each day: to charge for AI, and to show you.
Your linked computers	Each one's name, when it was linked and last checked in. We keep only a fingerprint (a hash) of its link, never the link itself.
What our admins did to your account	Plan changes, credits added, a disabled sign-in: a record beside your account.
Payments, when they open	Handled by Paddle, our reseller. We never see your card number.
Visits to this site	The web server logs IP addresses, as web servers do. No ads, no trackers, no analytics.

Without an account, the update check is all that reaches atdig.com, and you can turn it off. atdig.com runs on Amazon Web Services in the USA. We don't sell anything about you.

Sealed on atdig.com: sync

With an account, your devices can sync. Before anything leaves a device it's encrypted (AES-256-GCM) with your sync key, which only your devices hold. atdig.com stores it in a storage bucket of your own and passes it between your devices, but can't read it.

What syncs	What atdig.com can see of it
Your settings and decisions: rules, interest marks, hidden companies, what you skipped or dismissed, unsubscribes, your identities	That something was stored: its size, when, and from which of your linked computers. Not what it says, not which email it's about, not even your email address: each mailbox's space is named by a value only your key can produce.
The activity log: what the app changed on your mail server, on which device
The AI's analysis: its answers, body checks, what it learned about senders
Your AI settings (never your keys) and each device's AI spend, for one daily limit

Adding a device uses a one-time code your other device shows. The key travels sealed under that code, which never reaches atdig.com, and the sealed copy is gone within 10 minutes.
Your recovery code unlocks a second sealed copy of the key, so you can get your synced data back if you lose every device. atdig.com keeps that copy, but without the code we can't open it, and we can't recover your data for you.
Each batch of changes names the one before it, so if anything is lost or altered in storage, your devices notice rather than trusting it.

Cloud (coming soon)

Cloud adds two things that work differently, and you choose whether to use them. AI included: our AI service reads the parts of your email it checks, to classify them, and doesn't keep them longer than that takes. Your email in your AI assistant: atdig.com hosts what your assistant needs to answer about your mail, so it can read it. Use Cloud without the assistant, and your sync stays end-to-end encrypted.

Deleting it

In the app: its settings can delete its local copy, and uninstalling removes the app; your mail stays with your email provider.
On atdig.com: when your account is deleted, so are its record, its linked computers and its whole sync storage. Unused Dig credits are lost; see the refund policy.

Questions? Email support@atdig.com. The legal side is in our privacy policy.