Eight Point Labs LLC

Privacy policy

Keryx connects your phone directly to the communication services you choose. Eight Point Labs does not run an intermediary Keryx service, insert advertising, or add analytics or tracking SDKs.

Effective: August 29, 2026

1. Scope and who we are

This policy applies to the Keryx Mail Android application, package name com.eightpointlabs.keryx, published by Eight Point Labs LLC. It does not govern the independent mail, calendar, contact, task, identity, hosting, or internet providers that you connect to Keryx.

2. Information Keryx processes

To provide the features you request, Keryx may process:

• Account and connection information: email addresses, usernames, server addresses, account labels, connection settings, and passwords or app-specific passwords.
• Mail information: messages, headers, sender and recipient addresses, drafts, outgoing mail, folders, flags, search terms, attachments, and synchronization state.
• Contacts: names, email addresses, phone numbers, postal addresses, notes, photos, groups, and other fields provided by the connected address book.
• Calendars and tasks: events, attendees, locations, notes, reminders, attachments, task details, and calendar or task-list metadata.
• App preferences: display choices, notification settings, swipe actions, signatures, identities, trusted remote-image domains, and similar configuration.
• Files you choose: attachments you open or save, files you attach, calendar attachments, and Keryx backup files you create or restore.

3. Where the information goes

Keryx stores working copies and settings locally in the app's private storage on your Android device. It exchanges information directly with services you configure, using JMAP, IMAP, SMTP, CalDAV, CardDAV, or a calendar-feed URL as applicable. Those services receive and retain information under their own terms and privacy policies.

Eight Point Labs does not operate a Keryx cloud account or proxy your account traffic through an Eight Point Labs server. We do not use app data for advertising, profiling, or data brokerage, and we do not sell it.

4. Credentials and security

Keryx stores account secrets using Android Keystore-backed encryption and keeps its database and cache in Android's private app storage. It requires an encrypted connection before sending a password. Android system backup is disabled for Keryx.

No system is perfectly secure. Your device security, server configuration, provider practices, network, and any apps with which you intentionally share a file also affect the protection of your information.

5. Optional phone integration and permissions

Keryx asks for sensitive permissions only when the related feature needs them:

• Contacts: if you enable the phone contacts bridge, Keryx can read and write contacts so its address books appear in Android's Contacts app and edits can synchronize in either direction.
• Calendar: if you enable the phone calendar bridge, Keryx can read and write calendar data so its calendars appear in Android's Calendar apps and edits can synchronize in either direction.
• Notifications: used for new mail, reminders, background connection status, and related actions you enable.
• Alarms and startup: used to deliver reminders, return snoozed mail, and restore scheduled work after a restart or app update.
• Network and foreground service: used to synchronize and, when push is enabled, keep a visible background connection to your JMAP server.

You can deny or revoke optional permissions in Android Settings. The related integration will stop working, while unrelated Keryx features remain available.

6. Remote images, links, and other apps

Keryx blocks remote images in messages by default. If you choose to load them for a message or trust a sender's domain, the image host may learn information normally sent with a web request, such as your IP address, request time, and user-agent details. A sender may use a unique image URL to infer that a message was opened.

External links open only after your action and are handled by your browser or another selected app. Opening, sharing, or saving an attachment gives the destination app or storage provider access to that file under its own privacy practices.

7. Backups and exported files

A Keryx backup is created only when you request one. It contains account addresses and server settings, account appearance, sending identities and signatures, folder preferences, app preferences, and the domains whose remote images you have trusted. It does not contain passwords, mail, drafts, contacts, calendars, or tasks. The backup is placed where you choose through Android's file tools, and you control its retention and sharing.

8. Retention and deletion

Local account data remains on your device until it is replaced during synchronization, you remove the account in Keryx, you clear Keryx's storage in Android Settings, or you uninstall the app. Removing an account from Keryx deletes its saved credential and local cache but does not delete information from the server.

Files you saved outside Keryx, including downloads and backup files, must be deleted from their saved location separately. For full instructions, see Remove your Keryx data.

9. Support messages and website visits

If you contact us, we receive the address, content, and attachments you voluntarily send so we can respond and maintain a support record. Do not send passwords or unredacted private messages.

These public pages are delivered by Cloudflare, which may process ordinary network and security data such as IP addresses, request details, and abuse signals to operate and protect the site. The Keryx pages do not contain advertising or analytics scripts.

10. Children

Keryx is a general-purpose communications client and is not directed to children under 13. Eight Point Labs does not knowingly collect personal information from children through Keryx.

11. Changes to this policy

We may update this policy when Keryx's behavior, applicable requirements, or our business changes. We will publish the revised policy here and change the effective date. Material changes will be communicated in the app or release notes when appropriate.

12. Contact

Privacy questions can be sent to privacy@eightpointlabs.com.

Eight Point Labs LLC
4030 Wake Forest Rd Ste 349
Raleigh, NC 27609
United States