Privacy
For Maru Mail and this site. The web app has its own text.
Draft. This text is awaiting legal review and is not final.
Summary
Maru Mail is the email module of the Maru Hub app on iPhone, iPad and Mac. Your email and your email passwords stay on your computer and are not sent to us. We do not store email content on our servers.
Data that stays on your computer
These are stored only on your device and are not sent to any server:
| Data | Where |
|---|---|
| Email account passwords | The device keychain |
| Email content, headers, attachments | App database |
| Calendar events, notes, folder rules | App database |
| App settings | App preferences |
If you delete the app, this data is deleted too.
Connecting to your email provider
Maru Mail uses the account details you enter to connect directly to your email provider (Gmail, iCloud, your own server and so on). This connection does not pass through our servers.
Send tracking (read receipts), optional
This feature is off by default and runs only if you turn it on.
When it is on, an invisible 1×1 pixel image is added to the email you send. When the recipient opens the email, the image is fetched from a server you configure, and the following is recorded:
- A random identifier for the send
- The time it was opened
- The browser or client making the request (user agent)
- IP address
This data is kept on your own server (you set it up); Maru Mail does not collect it or see it.
Responsibility
Read tracking collects behavioural data without the recipient’s knowledge. Under KVKK and GDPR this is processing of personal data. If you choose to use this feature, the legal responsibility, including the duty to inform recipients, is yours.
Maru ID (optional account)
Maru Mail works fully without an account. If you create one, we keep only the following on our servers:
- Your email address
- An irreversible digest (hash) of your password
- Which Maru modules you can access and your subscription status
- The names and last-seen times of the devices you registered
Your email content, email passwords and contact list are not sent here.
Account data is held on Supabase, on servers in Ireland. Because this involves a transfer of data outside Türkiye, creating an account means you consent to that transfer.
Third parties
| Service | For | What is sent |
|---|---|---|
| Supabase | Maru ID accounts | Email address, subscription status |
| Gravatar | Sender profile photo | An irreversible digest of the sender’s address |
| Apple | Notifications, Keychain | Stays on your device |
Maru Mail uses no ad networks, analytics or tracking tools.
This site
joinmaru.com uses no cookies and no analytics. Fonts and images come from the same domain; the pages send no requests to outside services. The ?kaynak=site on the link to the trial only shows that the visit came from this site and carries no personal data.
The web app
The web app where Proje, Chat and Plan run has its own privacy text: Web app privacy text.
Your rights
Under KVKK and GDPR you have the right to access, correct, delete and move your data. If you want to delete your Maru ID account you can ask at the support address; all data tied to your account is deleted.
You can delete the data on your computer at any time by removing the app; you do not need to contact us.
Contact
Last updated: November 6, 2026