Your email stays yours.

InboxFamily gives your family email addresses on your own domain. To run that service we store your account details and your email. That's it.

We do not read your email for advertising, we do not show ads, and we never sell your data. No human at InboxFamily reads your messages.

Account information: your name, the email address you sign in with, and your family domain.

Mailbox details: the mailboxes you create (address, display name) and how much storage each one uses.

Your email: messages sent to and from your mailboxes are stored on our mail servers so you can read them in your apps. We store them to deliver the service, nothing else.

Payment information: handled by our payment provider (Stripe). We never see or store your full card number.

Security and technical data: connection logs and IP addresses, plus spam and abuse signals, kept for a short time to protect the service.

We use your data only to run InboxFamily:

• Deliver, store, and let you access your email
• Sign you in (passkeys and one-time email links)
• Filter spam, phishing, and malware automatically
• Detect and stop abuse so one bad actor can't harm everyone on the server
• Process your subscription and provide support

To keep inboxes clean, our systems automatically check messages for spam, phishing, and malware, using a statistical classifier, DNS blocklists, and similar techniques. This is fully automated.

This filtering exists to protect you. It is never used for advertising, profiling, or building a picture of you, and the results are never sold or shared. No person reads your mail.

• We don't read your email to target ads
• We don't show ads in your inbox
• We don't sell, rent, or trade your data
• We don't load third-party advertising or tracking on your mail

We use only the essential cookies needed to sign you in and keep you logged in to the panel. We don't use advertising or cross-site tracking cookies.

We rely on a small number of trusted providers to run InboxFamily. They only process what they need to do their part, and they're bound by their own data-protection terms:

• App hosting and the inboxfamily.com website: Vercel, in Frankfurt
• Database (your account and mailbox details): PlanetScale, in Frankfurt
• Payments: Stripe
• Domain registration and DNS: Cloudflare
• Encrypted backups of the mail server: Cloudflare R2, in the European Union
• Your email itself: on our own mail server, in a Hetzner data centre in Helsinki, Finland
• Sending mail out, both yours and our own letters to you: Amazon SES, in Frankfurt
• Sender pictures in the webmail: Gravatar and logo.dev, asked by our server so neither of them ever sees you

Everything stays in the European Union. Your mail sits on our own server in Helsinki, Finland; your account details, the panel, the mail we send you and our encrypted backups are all in Europe too.

All of these providers except our hardware supplier are US companies, and US law can reach a US company wherever its servers stand. Where data is processed outside the EU we rely on standard contractual safeguards.

We keep your account and email for as long as your account is active.

If you cancel, your service runs until the end of your paid period. For two weeks after that you can still sign in, read, and download everything. Then sign-in stops, and sixty days after the paid period ended the mailboxes and everything in them are deleted. See our Terms of Service for the full schedule.

Security and connection logs are kept for 14 days and are then deleted. They are left out of the backups, so that is the whole of it, and after that we cannot show them to you or to anyone else because they no longer exist. Deleted mailboxes are removed for good. The mail server itself is backed up every night, encrypted, so deleting a mailbox takes up to a further two weeks to work its way out of those backups.

You can ask us to show you the data we hold, correct it, or delete it. You can also export your email yourself at any time while your account is active or suspended. It's standard IMAP, so any email app can download a full copy.

To make a request, email privacy@inboxfamily.com.

Connections to your mailbox are encrypted with TLS. Every domain is set up with industry-standard email authentication (SPF, DKIM, DMARC), and we automatically block brute-force logins and abuse. No system is perfectly secure, but we work hard to keep yours safe.

InboxFamily is a family product, so some mailboxes belong to children. The account itself belongs to an adult: children don't sign up, don't sign in to the panel, and can't reach anything to do with payment. When you mark a mailbox as a child's, you are telling us as their parent or guardian that we may hold it, and that permission is the basis on which we do.

What we hold for a child's mailbox is the same as for anyone else's, and no more: the address, the name you gave it, how much storage it uses, the mail sent to and from it, and connection records. We don't advertise, we don't profile anyone, and we don't sell or share data with anyone who would.

You can see and change everything about your child's mailbox from the panel, and deleting it deletes the mail in it. If you would rather we showed you what we hold or deleted it for you, email privacy@inboxfamily.com and we will.

We don't set out to collect anything from a child beyond running their mailbox. If you believe we hold something we shouldn't, tell us and we'll remove it.

If we change how we handle your data, we'll update this page and the date at the top. For significant changes we'll let account admins know.

Questions about your privacy? Email privacy@inboxfamily.com and we'll help. The business responsible for your data is W3, Podcienie 2, 43-300 Bielsko-Biała, Poland, VAT ID PL6462636764. If you live in the EU and think we've handled your data badly, you can also complain to your national data-protection authority.