Lodestar privacy policy

Last updated: October 24, 2026

Lodestar ("we") is a desktop email assistant that runs on your computer. This policy explains what Lodestar does with your information. In short: your email is processed on your computer and is not sent to us. We do not operate servers that receive your email.

What Lodestar accesses

When you connect a Google, Microsoft or other email account, Lodestar accesses:

• Email messages and their metadata (sender, recipients, subject, date, labels or folders, message body, and the text of PDF attachments) in the mailboxes you choose to watch, and your sent messages (to track replies you're waiting on).
• Your email address, to identify the mailbox.
• Your calendar's free/busy times, only if you choose Connect calendar: when you are busy, never event titles, attendees or details. They are used only to suggest free times in reply drafts you review; Lodestar never creates or changes calendar events.

Depending on the access you grant and the permissions you enable for each mailbox, Lodestar may also, only when you allow it:

• archive messages
• apply labels or categories
• save reply drafts
• send replies you approve, or replies to senders you've marked as trusted
• send one-click unsubscribe requests

If you connect a mailbox read-only, Lodestar can only read it.

How Lodestar uses this data

Lodestar uses your email data only to provide its features to you:

• summaries
• priorities
• reply drafts
• deadline and bill tracking
• follow-up reminders
• search and answers about your mail
• the actions you authorize

Email content is analyzed by an AI model that runs on your own computer (Ollama). Lodestar does not use your data for advertising, does not sell it, and does not use it to train AI models.

Where your data is stored

Lodestar stores summaries, settings, recent messages and its history in your Windows user profile (%APPDATA%\inbox-pilot), encrypted with Windows' built-in data protection by default. Sign-in tokens and passwords are always stored encrypted. You can delete all Lodestar data at any time by removing a mailbox in the app (which deletes its sign-in and stored messages) or by deleting that folder.

When data leaves your computer

• Your email provider (Google, Microsoft or your mail server), to read and act on your mail as you direct.
• Phone notifications, only if you turn them on:

- At the default "Minimal" level, no email content is included.

- At the "Sender" or "Full" level, email senders, subjects and summaries are sent through the notification service you chose (ntfy or Telegram) under that service's privacy policy.

• Setup lookups: when you add a mailbox, only the address's domain (for example "example.com") is looked up to find server settings, using Mozilla's public autoconfig database and Cloudflare DNS.
• One-click unsubscribe requests go to the sender's unsubscribe address when you, or automatic mode, unsubscribe.

We do not receive any of this data.

Google user data

Lodestar's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Google user data is used only to provide or improve user-facing features that are prominent in Lodestar's interface.
• It is not transferred to others except as needed to provide those features (for example, to a notification service you configure), to comply with law, or as part of a merger or acquisition with notice to you.
• It is not used for advertising.
• No human reads it, unless you give consent for specific messages, it's needed for security purposes, or the law requires it.

Children

Lodestar is not directed to children under 13.

Changes

We will update this policy when Lodestar's data handling changes and note the date above.

Contact

Questions or requests: open an issue at https://github.com/Kaeden-Martinson/Lodestar/issues