Privacy

Effective 14 June 2026

Clementine is a native Mac email client. It connects to your Google accounts and runs on your Mac. We built it so your mail stays with you: GoldenBerry Software runs no servers that hold your email, and nothing reads what is in your inbox.

The short version

• Your mail lives on your Mac. Clementine talks directly to Google's APIs from your device.
• We run no servers that store your email or its contents.
• AI is opt-in. Summaries and drafts only run when you ask, using an AI key you provide.
• Your mail is never used to train any model.
• No analytics, ads, or third-party trackers inside the app.

Your mail stays on your Mac

Clementine reads and sends mail by talking straight to Google's Gmail API from your device. Messages, drafts, and attachments are stored locally on your Mac. We do not route your mail through our servers, and we keep no copy of it.

Your Google connection

You connect each account with Google's official sign-in (OAuth), and Clementine requests only the Gmail, Calendar, and Contacts permissions it needs to work. Access tokens are stored in your Mac's Keychain. You can review or revoke Clementine's access at any time from your Google Account security settings.

AI is opt-in, and you bring your own key

Clementine's AI features do nothing until you ask for them. When you request a summary or a draft, only the text needed for that request is sent to the AI provider you have configured, using your own API key. We are not in the middle of those requests, and your mail is never used to train a model. Add no key, and the AI features stay off.

The CLI and agents

The clem CLI and MCP server run locally on your Mac and act with the permissions you have granted the app. They only do what you allow, and they leave an auditable record. Nothing runs in the background unless you set it up.

What Clementine does not do

The app contains no analytics, no advertising, and no third-party trackers. It does not phone home with your inbox, your contacts, or what you read.

Payments

When Clementine is available to buy, payment will be handled by the app store or processor it ships through. We receive confirmation of a purchase or licence, not your card details, which are handled under that processor's own privacy policy.

This website

This marketing site uses privacy-friendly, cookieless analytics and loads fonts from Google Fonts. If you join the waitlist, we store the email address you give us so we can send your beta invite, and nothing else. You can ask us to remove it at any time.

Your rights

If you are in the EU or UK, you have the right to access, correct, delete, and export your personal data. Because your mail and settings live on your device, you can export or delete them yourself at any time. For the waitlist email we hold, contact us and we will act within 30 days.

Children

Clementine is not directed at children under 13, and we do not knowingly collect personal information from them.

Changes

If we change this policy, we will update the date above and, for material changes, note it on this page.

Contact

You may also contact the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) if you have a concern we have not resolved.