Updated 8 November 2026

What local-first means in Penvia
- No Penvia server receives, stores or analyses your email.
- Messages, attachments and the search index live in Penvia's private storage on your device, protected by your device's data protection.
- Sign-ins are kept in Apple Keychain and go only to your provider.
- Sorting, summaries and smart replies run on your device. On devices with Apple Intelligence, Apple's on-device model helps.
No ads, no tracking
Penvia shows no advertising, contains no tracking or analytics SDKs, sells no data and builds no profiles. There is no Penvia account to create: you sign in to your own provider.
The optional services, explained
Instant alerts for Outlook, Microsoft 365 and Gmail (Google sign-in) use a small push relay that stores device and registration identifiers and one-way hashes, never email content or passwords.
Optional Instant alerts for a Yahoo, iCloud or IMAP account, switched on per account, use Penvia's mail-watch service. It keeps that account's sign-in encrypted, watches the Inbox read-only for new message numbers, never reads or stores email, and deletes the sign-in when you switch it off. Details: Privacy Policy, section 2a.
You stay in control
Lock Penvia with Face ID. Remove an account in Settings › Accounts and Penvia deletes that account's mail, search index and files from the device; nothing is deleted on your provider's server.
Questions
Does Penvia read my email on a server?
No. Penvia has no mail server. Your device talks directly to Gmail, Outlook, Yahoo, iCloud or your IMAP provider.
Is Penvia an end-to-end encrypted email service?
No. Penvia is an app for your existing accounts, not an encrypted email service. Connections to your provider use SSL/TLS, and your mail stays on your device and with your provider.
Does Penvia use my email for AI or ads?
No. There are no ads, and smart features run on your device.
