Privacy
Last updated October 30, 2026
Short version: your mail is yours. Post keeps a copy so it can show it to you, KORA (the AI) reads only the mail you tick, and we never sell your data, show ads, or use your mail to train AI models.
Who we are
Post (KaiMaPost) is an email app run by KaiMa Foundry, part of GeoffMedia, LLC ("we"). Questions about this page go to [email protected].
What we collect
- Your account: your email address. Post is invite-only. You sign in with an emailed link (or a password, if you set one), handled by our sign-in provider.
- Mailboxes you connect: the address, the mail server names and ports, and the password or access token needed to reach the mailbox. Passwords and tokens are stored encrypted, are never sent back to your browser, and are used only by Post's server to fetch and send your mail.
- Your mail: copies of the messages Post fetches (senders, recipients, subjects, dates, message text and attachments), plus what you add: labels, buckets and bucket rules, stars, snoozes, follow-up dates, drafts, scheduled messages, templates and signatures.
- Read receipts you turn on: if you switch on tracking for a message you send, Post records when that message is opened and which of its links are clicked.
- KORA usage: a record of each AI request (the feature, the model, its size and cost, and whether it worked) so we can keep spending within a daily limit. This record doesn't contain your mail.
- Technical data: IP address and browser details in our hosting provider's logs.
How we use it
- To run Post: sign you in, fetch and send mail for the mailboxes you connect, and show your mail to you.
- To send the emails you ask for, such as sign-in links and invites.
- To keep Post safe and working: spotting abuse, fixing errors and controlling costs.
We don't sell your data, we don't show ads, and we don't use your mail to train AI models.
KORA (AI features)
KORA reads only mail you allow: each mailbox, label and conversation has a check mark, and mail that looks sensitive (sign-in codes, password resets and similar) starts unticked. When you use a KORA feature (sorting, priority, summaries, meeting spotting, draft replies or Ask KORA), the text of the mail it can see is sent to Anthropic, which writes the result under its API terms. KORA only suggests and drafts: it never sends, deletes or moves mail on its own. Each person has a daily KORA limit.
Kimi memory: KORA can remember short notes from mail it was allowed to read, so later answers are better. You can see and forget these in Settings. Untick something and what was learned from it is forgotten. If the KaiMa suite's shared memory is switched on, these notes are also shared with your other KaiMa apps, and forgetting reaches them too.
Gmail and Google data
If you connect a Gmail account, Post asks Google for permission to read, send and organise your Gmail. Post uses this only to show your Gmail in Post, send the mail you write, and keep read, archive and label changes in step with Gmail. Post's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is shared only with the service providers below that run Post (including Anthropic, for mail you tick for KORA), is never used for ads, and is never read by people except with your permission, for security, or where the law requires it.
Who else handles your data
- Supabase: sign-in, the database that holds your mail, and the server functions that fetch and send it (United States).
- Cloudflare: hosting for the Post website and the KORA server.
- Purelymail: sends Post's sign-in emails.
- Anthropic: the KORA features described above.
- Your mail providers (for example Purelymail, Fastmail or Google): Post connects to them on your behalf.
Who can see your mail
Only you. Post's admins can see account-level details (addresses, dates, counts and errors) to keep the service running, but not the subject or text of your mail.
On your device
Post uses your browser's storage to keep you signed in and to remember settings such as light or dark mode. We use no advertising cookies. Remote images in mail are blocked until you choose to show them, so senders can't track you just because you opened a message.
How long we keep it
Mail and settings stay until you delete them or remove the mailbox. If you ask us to close your account, we delete it with its mailboxes and mail; backups are cleared on their normal cycle shortly after.
Your choices
- Untick any mailbox, label or conversation to keep it from KORA, and forget what Kimi learned in Settings.
- Remove a mailbox at any time; its stored password or token goes with it.
- Ask us for a copy of your data, a correction, or deletion of your account at [email protected].
Children
Post isn't meant for children under 13.
Changes
If this page changes in a way that matters, we'll update the date above and tell signed-in users in the app.