Privacy policy

Who this is

Qasid is built and operated by Muhammad Idrees, an individual developer trading as FTMOI (“we”, “us”). Contact: ftmo.idrees@gmail.com.

What Qasid accesses

When you connect your Google account, Qasid asks for a single Gmail permission: https://www.googleapis.com/auth/gmail.modify. This lets the app read your messages and change their state — marking a thread read, archiving it, applying a label. It does not permit permanent deletion.

Google also returns your email address and profile name so the app can show you which account is connected.

Where that data goes

Onto your device, and nowhere else. Qasid requests your mail from Google’s servers directly from your phone and stores it in a local database on that phone. It is not transmitted to, stored on, processed by, or accessible from any server operated by us, because we do not operate one.

• We have no backend, no hosting and no database.
• We have no account system, so there is no profile of you on our side.
• We collect no analytics or telemetry. The app ships with no analytics SDK and no crash-reporting SDK.
• We show no advertising and we have never sold or shared any user data.

Your OAuth tokens are held in the operating system’s credential storage on your device and are used only to talk to Google.

Limited Use disclosure

Everything the app connects to

This is the complete list of network destinations Qasid reaches:

• Google — to sign you in and to read and update your mail.
• Google Play — to check whether a newer version of Qasid is available.
• A sender’s own servers — only if a message you open loads images hosted by them. See the limitation below.
• Your browser — if you tap a link, it opens outside the app.

One limitation we want you to know about

Most marketing email contains a hidden tracking image. Loading it tells the sender that you opened the message, and roughly where you were when you did. Qasid does not block remote images yet — the same default as Gmail, Outlook and Apple Mail. This is the one item on this page that works against you, which is why it is on this page rather than omitted from it. Blocking is on the roadmap.

How messages are displayed

Email is rendered inside an isolated frame with JavaScript switched off, so a message cannot run code or reach the rest of the app. Links open in your browser rather than inside Qasid.

Retention and deletion

Because your mail is stored only on your device, you control its lifetime completely. Disconnecting your account inside the app deletes the local database — every message Qasid saved on that device is removed. Uninstalling the app has the same effect. Nothing in your Gmail account changes either way, and you can reconnect at any time.

You can also revoke Qasid’s access from your Google Account at myaccount.google.com/permissions. Since we hold nothing, there is no deletion request for you to send us — but if you want written confirmation of that, email us and you will get it.

Your rights

Data-protection law gives you rights of access, correction, erasure and portability over personal data a company holds about you. We hold none, so there is nothing for us to produce, correct or erase. Your mail is your own, on your own device, and Google remains the controller of the mailbox itself — their privacy policy governs that relationship.

Children

Qasid is not directed at children under 13 and we do not knowingly collect data from them.

Beta software

Qasid is currently in closed testing. It is early software and may contain defects. Your mail lives in your Google account regardless of what the app does locally, and no action Qasid takes is unrecoverable from Gmail.

Changes to this policy

If the app’s data handling changes — a backend, an analytics tool, a third-party service that processes message content — this page will be updated before that version ships, and the date at the top will change with it.