SoulMail

Privacy Policy

Last updated: 31 August 2026

Zero-access principle. Your emails are stored on our server in encrypted form only. The key to decrypt them lives solely on your device, protected by your passphrase. This means we cannot read the content of your emails — not even upon a government request, because we have no access to the plaintext.

1. Controller

optinno GmbH, Schwarzseestrasse 114, 1716 Schwarzsee, Switzerland.

Company ID / VAT: CHE-115.194.557 MWST · Phone: +41 26 412 12 12

Privacy contact: datenschutz@optinno.ch

2. Data we process

Email address of your @soulmail.ch mailbox — for delivery and sign-in.
Mailbox password — stored only as a cryptographic hash (SHA-512-Crypt), never in plaintext.
Public encryption key (PGP) — not secret; needed to encrypt incoming mail.
Email content, subject, attachments — stored on the server as ciphertext only.
Payment data (only when buying an address) — via Stripe; we store no card details.
Technical data — IP address briefly for spam/abuse prevention, plus server logs.

The free app itself sends us no usage data. If you use it with a third-party account (e.g. Gmail), that provider’s privacy terms apply; such emails are not zero-access encrypted.

3. Purposes

Operating your mailbox (receiving, encrypted storage, sending).
Billing for paid @soulmail.ch addresses.
Security, fraud and spam prevention.
Compliance with legal obligations.

4. What we do NOT do

No reading, analysing or scanning of your email content (technically impossible).
No advertising, no tracking, no profiling.
No selling or sharing your data for advertising.

5. Sharing with third parties

We share data only where needed to operate the service or required by law:

Stripe — payment processing.
Hosting — operated on servers in Switzerland.

For normal email delivery, messages are necessarily transmitted to the servers of recipients/senders (as with any email).

6. Retention

Emails remain stored (as ciphertext) until you delete them or, with POP3 “remove from server”, they are removed automatically after download. When a mailbox is deleted, the related data is deleted. Technical logs are kept only briefly.

7. Your rights

Under the Swiss Data Protection Act (revDSG) and — where applicable — the EU GDPR, you have the right to access, rectification, erasure and data portability, and to lodge a complaint with the supervisory authority. Contact: datenschutz@optinno.ch.

As we cannot decrypt encrypted content, such requests concern the metadata we hold (e.g. address, ciphertext).

8. Data security

Encrypted storage of content (zero-access), TLS-encrypted connections (IMAP 993, POP3 995, SMTP 587), passwords stored only as hashes, safeguards against abuse.

9. Changes

We may update this policy. The version published here applies.

optinno GmbH · SoulMail · soulmail.ch