Troxic is a desktop email and calendar application. This policy explains what data Troxic touches, where that data lives, and what Troxic does and does not do with it.
The short version. Troxic runs entirely on your computer. Your email and calendar data is exchanged directly between your device and Google's servers. Troxic operates no backend service, and your Google user data is never transmitted to, stored on, or processed by any server controlled by us or by any third party.
1. Who we are
Troxic is operated by [LEGAL ENTITY NAME], [ADDRESS], Switzerland. For any privacy question, contact contact@troxic.ch.
2. Google user data Troxic accesses
When you connect your Google Account, you are asked to grant specific permissions (OAuth scopes). Troxic requests the following and nothing else:
| Scope | What it allows | Why Troxic needs it |
|---|---|---|
gmail.modify | Read, compose, send and organise messages in your mailbox | Core mail client function: displaying your inbox, threading conversations, replying, marking read/unread, applying labels, archiving |
gmail.readonly | Read messages and settings | Reading message content and your Gmail settings to render the mailbox faithfully |
gmail.send | Send mail on your behalf | Sending the messages you compose |
gmail.labels | See and edit labels | Displaying and managing your label structure |
calendar.events | View and edit events on your calendars | Showing your schedule and creating, editing or deleting events you act on |
calendar.calendarlist.readonly | See the calendars you subscribe to | Listing your calendars so you can choose which to display |
calendar.events.freebusy | See availability on calendars you can access | Showing free/busy time when scheduling |
userinfo.email, openid | Your primary email address and account identity | Identifying which account is signed in and labelling it in the interface |
3. Where your data is stored
All Google user data retrieved by Troxic is held locally on your device, in Troxic's application data directory, so that the app can work offline and load quickly. This local cache includes message content, headers, attachments you open, labels, and calendar events.
- The cache is stored under your operating system user account and is protected by your device's own access controls and disk encryption, if enabled.
- OAuth tokens are stored in your operating system's credential store (Keychain on macOS, Credential Manager on Windows, Secret Service on Linux) — not in plain text.
- Signing out of Troxic revokes the stored token and deletes the local cache.
4. What Troxic does not do
- Troxic runs no mail server, no sync service, and no background processing backend. Your mailbox is never copied to, indexed by, or continuously synchronised with a service we run.
- Troxic performs no background scanning of your mailbox. Nothing is sent anywhere except in response to an action you take.
- Troxic does not sell, rent, or license your data to anyone.
- Troxic does not use your data for advertising or to build advertising profiles.
- Troxic does not use your Google user data to train, fine-tune, or improve any
artificial intelligence or machine learning model. Requests to OpenAI are sent with
store: false, which excludes them from OpenAI's training and retention.
Troxic does, however, offer optional integrations that send specific message content off your device when you explicitly invoke them. These are described in full in section 7. Please read it.
5. Limited Use disclosure
Troxic's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
6. Data we do collect
Troxic collects a minimal set of non-content data, none of which includes your Google user data:
- Licence and update checks. When Troxic checks for a new version, our update server receives your IP address, the app version and your operating system. These logs are retained for 30 days and are used only for delivering updates and diagnosing update failures.
- Crash reports. If you opt in, Troxic sends anonymised crash reports containing stack traces and app state. Crash reports are scrubbed of message content, addresses and subject lines before transmission. This is off by default and can be turned off at any time in Settings.
7. Optional integrations that send data off your device
Troxic has no server of its own, but it can hand specific content to third-party services when you ask it to. Every one of these requires a deliberate action by you, uses credentials you supply, and applies to one thread or one message — never your mailbox as a whole.
| Service | What triggers it | What is sent | Destination | Credentials |
|---|---|---|---|---|
| OpenAI | You invoke an AI action on an open thread | The content of that thread only | api.openai.com |
Your own OpenAI API key. Requests are sent with store: false. |
| Apple Intelligence (on device) | You select “On this Mac” as the AI provider | Nothing leaves your device | Local | None |
| DFIR Lab | You press the shield on a message, or select a single URL to check | The complete open message exported as RFC 822 — headers, body, and attachments — or the one URL you selected | api.dfir-lab.ch |
Your own DFIR Lab API key |
| Update check | Automatic, periodic | App version, operating system, IP address. No message or calendar data. | updates.troxic.ch |
None |
Disclosure of affiliation
DFIR Lab (api.dfir-lab.ch) is operated by [LEGAL ENTITY NAME], the same organisation
that publishes Troxic. When you use the phishing-analysis feature, the message you submit is
transmitted to and processed on infrastructure we control. Messages submitted for analysis are
retained for [DFIR LAB RETENTION PERIOD] and are used solely to produce the analysis you requested.
They are not used for any other purpose, are not shared, and are not used to train models.
This feature is off unless you add an API key, and it never runs on its own.
Troxic contacts no other external service. It shares your Google user data with no advertiser, data broker, analytics provider, or any party not listed in the table above.
8. Your rights
Because your data stays on your device, you control it directly: delete Troxic's local cache at any time from Settings, or revoke Troxic's access entirely at myaccount.google.com/permissions. Revoking access immediately stops all further data retrieval.
Under the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR), you have rights of access, rectification, erasure, restriction, portability and objection in respect of personal data we hold. Since we hold no Google user data, these rights apply to the limited non-content data described in section 6. Write to contact@troxic.ch to exercise them.
9. Children
Troxic is not directed at children under 16 and we do not knowingly collect their data.
10. Changes to this policy
If we change this policy materially — in particular if Troxic ever begins transmitting Google user data off your device — we will update the date at the top of this page and notify you in the application before the change takes effect.
11. Contact
[LEGAL ENTITY NAME]
[ADDRESS]
Switzerland
contact@troxic.ch