Your email is your business.

InboxFamily gives your family email addresses on your own domain. To run that service we store your account details and your email. That's it.

We do not read your email for advertising, we do not show ads, and we never sell your data. No human at InboxFamily reads your messages.

Account information — your name, the email address you sign in with, and your family domain.

Mailbox details — the mailboxes you create (address, display name) and how much storage each one uses.

Your email — messages sent to and from your mailboxes are stored on our mail servers so you can read them in your apps. We store them to deliver the service, nothing else.

Payment information — handled by our payment provider (Stripe). We never see or store your full card number.

Security and technical data — connection logs and IP addresses, plus spam and abuse signals, kept for a short time to protect the service.

We use your data only to run InboxFamily:

• Deliver, store, and let you access your email
• Sign you in (passkeys and one-time email links)
• Filter spam, phishing, and malware automatically
• Detect and stop abuse so one bad actor can't harm everyone on the server
• Process your subscription and provide support

To keep inboxes clean, our systems automatically check messages for spam, phishing, and malware — using a Bayesian classifier, DNS blocklists, and similar techniques. This is fully automated.

This filtering exists to protect you. It is never used for advertising, profiling, or building a picture of you, and the results are never sold or shared. No person reads your mail.

• We don't read your email to target ads
• We don't show ads in your inbox
• We don't sell, rent, or trade your data
• We don't load third-party advertising or tracking on your mail

We use only the essential cookies needed to sign you in and keep you logged in to the panel. We don't use advertising or cross-site tracking cookies.

We rely on a small number of trusted providers to run InboxFamily. They only process what they need to do their part, and they're bound by their own data-protection terms:

• App hosting and the inboxfamily.com website — Vercel
• Database (your account and mailbox details) — Neon
• Sign-in emails (one-time login links) — Resend
• Payments — Stripe
• Domain registration and DNS — Cloudflare
• Your email itself — stored on our own dedicated mail servers

Some of these providers process data outside your country, including in the United States. Where that happens, we rely on standard contractual safeguards to protect your data.

We keep your account and email for as long as your account is active.

If you cancel, your service runs until the end of your paid period, then your account is suspended (you can still receive and download mail). About 30 days later your mailboxes are switched off, and your email is permanently deleted around 30 days after that. See our Terms of Service for the full schedule.

Security and connection logs are kept for roughly 30 days. Deleted mailboxes are removed for good.

You can ask us to show you the data we hold, correct it, or delete it. You can also export your email yourself at any time while your account is active or suspended — it's standard IMAP, so any email app can download a full copy.

To make a request, email privacy@inboxfamily.com.

Connections to your mailbox are encrypted with TLS. Every domain is set up with industry-standard email authentication (SPF, DKIM, DMARC), and we automatically block brute-force logins and abuse. No system is perfectly secure, but we work hard to keep yours safe.

InboxFamily is a family product. If you create mailboxes for children, you are responsible for those mailboxes and the email in them.

If we change how we handle your data, we'll update this page and the date at the top. For significant changes we'll let account admins know.

Questions about your privacy? Email privacy@inboxfamily.com and we'll help.