Hey Pigeon

Privacy Policy

Last updated: 2026-09-17

Hey Pigeon is a client-only application: it runs entirely on your device and has no backend server. Nobody but you — not even the developer — can see your email, contacts, or account data through Hey Pigeon.

What data Hey Pigeon accesses

When you connect a Google Account, Hey Pigeon requests the following scopes, used only to provide the corresponding feature:

Where your data lives

All Gmail data Hey Pigeon reads is stored in a local database on your device only. It is never transmitted to any server operated by the developer, because no such server exists. OAuth tokens are stored in your operating system's secure keychain, never in plain text.

AI features (optional)

If you enable an AI feature (e.g. summarize, draft), Hey Pigeon sends only the specific content needed for that action directly from your device to the AI provider you configure (OpenAI first), using an API key you provide and control. The developer never sees this traffic or holds your API key. Use of that provider is subject to its own privacy policy and terms.

Limited Use disclosure

Hey Pigeon's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

No selling, no ads, no analytics

Hey Pigeon does not sell or share your data, does not show ads, and does not run any tracking or analytics.

Revoking access & deleting data

You can disconnect an account at any time in Hey Pigeon's settings, or revoke access directly at myaccount.google.com/permissions. Since all data is local, uninstalling the app or deleting its local data folder removes everything Hey Pigeon has stored.

Contact

Questions about this policy: support@heypigeon.app.