Your data
Your data, in plain language.
Connecting your email is the part people hesitate over, and they should. Here's exactly what we read, what we never touch, where it goes and how to end it. The privacy policy is the formal version; nothing here contradicts it.
At a glance
- What we read
- Your mail, to spot purchase receipts.
- What we keep
- Receipts. Everything else is scored and left alone.
- For how long
- The receipt data stays with your record. The copy of the email is deleted after 90 days.
- Who sees it
- Your household, anyone you share a claim with, apps you connect, and our staff if they need to look into a problem with your account.
- How to stop
- Disconnect in Settings. One click, and the stored access is deleted.
Gmail, Outlook and Yahoo · We read, never send · Disconnect in one click
Permissions
What each mail provider lets us do
You see the permission on your provider's own screen before you agree to anything.
Gmail
What you grant
Google's read-only permission.
What that allows
Reading. Google won't let us send, delete, archive or change anything.
Outlook
What you grant
Microsoft's read-only mail permission.
What that allows
Reading. Microsoft won't let us send, delete or change anything.
Yahoo
What you grant
An app password you create in your Yahoo account.
What that allows
Yahoo doesn't offer a read-only app password, so here the limit is ours: we only ever open your mailbox to read. Delete the app password in Yahoo and our access ends.
| What you grant | What that allows | |
|---|---|---|
| Gmail | Google's read-only permission. | Reading. Google won't let us send, delete, archive or change anything. |
| Outlook | Microsoft's read-only mail permission. | Reading. Microsoft won't let us send, delete or change anything. |
| Yahoo | An app password you create in your Yahoo account. | Yahoo doesn't offer a read-only app password, so here the limit is ours: we only ever open your mailbox to read. Delete the app password in Yahoo and our access ends. |
We don't keep a copy of your inbox
Indemnia looks at messages to work out which ones are purchase receipts. That's a score, computed from things like the sender and the subject.
We store the full message only when it looks like a receipt. Everything else is scored and left alone. We keep a note that we checked it, so we don't keep re-reading the same mail, but we don't keep the message.
What we keep, and for how long
The receipt becomes part of your record: the vendor, the date, the items, the amounts, and the original document attached to the line it proves. It stays as long as your account does.
The stored copy of the email is temporary. It's kept for 90 days so we can re-read it if extraction needs correcting, then a scheduled job deletes both the record and the file.
Who can see it
Your data can be read by:
- the members of your household
- anyone you share a claim with, for that claim only
- apps you connect under Connected apps, within what you allowed, including the sender and subject of each email we checked if you connected a mailbox
- Indemnia staff, when they need to look into a problem with your account
Access is enforced where your data is stored, row by row, so a request for someone else's inventory returns nothing rather than relying on a screen to hide it.
Access to your email is stored encrypted and used only on our servers: to fetch your mail, and to cancel that access when you disconnect or delete your account. Some processing runs through service providers, named in the privacy policy. Content sent for AI processing isn't used to train models.
How to disconnect, and what happens then
Settings → Email and receipts → Disconnect. One click, no confirmation email, no waiting period. The stored access is deleted outright, not kept in case you come back. You can also cut us off from your Google or Microsoft account, or by deleting the Yahoo app password, whether or not you tell us.
The receipts we already found stay in your inventory, because “stop reading my email” doesn't mean “delete my record”. If you want those gone too, pick Delete what we found when you disconnect, or later from Settings → Email and receipts.
Taking a copy, and leaving
Settings → Account on the website puts together one file with everything we hold for you: your items, receipts, rooms, policies and claims, the photos, receipt scans and claim documents you uploaded, and what we read from your receipt emails. It's built on our side, so you can close the page and come back for it.
You can delete your account from the same page, or from Settings in the mobile app. Any household you own that nobody else is in is deleted with it, for good. A household you share with someone stays, and you simply leave it.
Small, not certified
We haven't been through SOC 2 or a similar audit. We'd rather say so than imply otherwise. Everything on this page describes how the product works today.