Eight Point Labs LLC

Privacy policy

Keryx connects your phone directly to the communication services you choose. Eight Point Labs does not run an intermediary service for personal mail or insert advertising. Google Play Billing handles Premium purchases and sends technical diagnostics to Google as described below.

Effective: October 5, 2026

1. Scope and who we are

This policy applies to the Keryx Mail Android application, package name com.eightpointlabs.keryx, published by Eight Point Labs LLC. It does not govern the independent mail, calendar, contact, task, identity, hosting, or internet providers that you connect to Keryx.

2. Information Keryx processes

To provide the features you request, Keryx may process:

• Account and connection information: email addresses, usernames, server addresses, account labels, connection settings, and passwords or app-specific passwords.
• Mail information: messages, headers, sender and recipient addresses, drafts, outgoing mail, folders, flags, search terms, attachments, and synchronization state.
• Contacts: names, email addresses, phone numbers, postal addresses, notes, photos, groups, and other fields provided by the connected address book.
• Calendars and tasks: events, attendees, locations, notes, reminders, attachments, task details, and calendar or task-list metadata.
• Optional widget weather: a US ZIP code you enter or approximate device coordinates you permit, the last saved weather location, cached forecasts, and widget appearance and refresh settings.
• App preferences: display choices, notification settings, swipe actions, signatures, identities, trusted remote-image domains, and similar configuration.
• Local productivity information: templates and snippets, saved searches, follow-up reminders, private message notes, links between tasks and messages, and folder appearance preferences. These may contain text you write, search terms, message subjects, and provider identifiers.
• Purchase information: Google Play product details, purchase status, tokens used to acknowledge purchases, and a locally cached Premium ownership status.
• Files you choose: attachments you open or save, files you attach, calendar attachments, and Keryx backup files you create or restore.

3. Where the information goes

Keryx stores working copies and settings locally in the app's private storage on your Android device. It exchanges information directly with services you configure, using JMAP, IMAP, SMTP, CalDAV, CardDAV, or a calendar-feed URL as applicable. Those services receive and retain information under their own terms and privacy policies.

Eight Point Labs does not proxy personal account traffic through its servers or require a separate Keryx account for ordinary use. We do not use app data for advertising, profiling, or data brokerage, and we do not sell it.

Optional clock and weather widgets

Weather is enabled only when you configure a widget weather location. In ZIP mode, Keryx sends the US ZIP code you enter to Zippopotam.us to look up a forecast location. In My location mode, Keryx requests Android's approximate foreground location permission, rounds the coordinates to two decimal places, and saves that point locally. Location can update while Keryx or its widget settings are open; background weather refresh uses the last saved point. Keryx does not request background location permission or continuously track your movements.

Keryx sends the selected approximate coordinates directly over HTTPS to NOAA / the US National Weather Service at api.weather.gov to retrieve weather. Zippopotam.us and the National Weather Service also receive ordinary request information, such as your IP address and request time, under their own service practices. Weather requests contain no mail, contacts, appointments, tasks, account credentials or purchase tokens. Eight Point Labs does not proxy these requests or receive the selected weather location.

The ZIP code, last approximate point and weather cache are kept in private app storage so forecasts can refresh and cached weather can remain available offline. They are replaced as settings, location or weather change and are removed when Keryx's app storage is cleared or the app is uninstalled. You can turn weather off in each widget's settings or use ZIP mode instead of device location. Revoking Android location permission prevents location-mode weather refresh; it does not erase already cached data. This optional information is used for weather functionality, not advertising or profiling.

Google Play purchases

Google Play processes Premium payments under Google's terms and privacy policy. Keryx uses Google Play Billing to obtain product and purchase information, acknowledge completed purchases, and restore access. It stores the last confirmed Premium status locally so a temporary connection problem does not remove access. Keryx does not receive payment-card details or send purchase tokens to an Eight Point Labs verification server. Google processes purchase-related information under its own terms and privacy policy.

The Google Play Billing library also queues and sends technical diagnostics to Google. These can include billing API activity and result codes, a randomly generated billing-session identifier, Keryx and Billing library versions, Android version, device manufacturer and model, system build information, memory size, language, country setting, time-zone offset, and network type. Diagnostic collection can begin when Keryx initializes Billing, including before a purchase, and Keryx has no separate switch to disable it. Events may be stored temporarily on the device for delivery and retry. Google handles this data under its privacy policy. Eight Point Labs does not receive these diagnostic reports or use them for advertising.

Optional shared demo mailboxes

For app review and demonstrations, Eight Point Labs operates dedicated shared mailboxes at demo.keryxmail.app. These contain fictional mail, contacts, calendars and tasks. When you sign in to a supplied demo mailbox, its content and any changes you make are stored on our isolated demo server and may be visible to other authorized reviewers. Do not add personal information or use these accounts for private correspondence. Internet mail delivery is disabled; test messages can be exchanged between the supplied demo accounts.

The demo server and Cloudflare, which provides its HTTPS connection and protection, process authentication and ordinary connection data to operate and secure the service. Demo content may be reset. To request removal of information you accidentally entered in a demo mailbox, contact privacy@eightpointlabs.com. Demo Premium access is a free preview, not a purchase or a personal hosted-mail service.

4. Credentials and security

Keryx stores account secrets using Android Keystore-backed encryption and keeps its database and cache in Android's private app storage. It requires an encrypted connection before sending a password. Android system backup is disabled for Keryx.

No system is perfectly secure. Your device security, server configuration, provider practices, network, and any apps with which you intentionally share a file also affect the protection of your information.

5. Optional phone integration and permissions

Keryx asks for sensitive permissions only when the related feature needs them:

• Contacts: if you enable the phone contacts bridge, Keryx can read and write contacts so its address books appear in Android's Contacts app and edits can synchronize in either direction.
• Calendar: if you enable the phone calendar bridge, Keryx can read and write calendar data so its calendars appear in Android's Calendar apps and edits can synchronize in either direction.
• Approximate location: requested only for My location weather. ZIP weather does not need it, and no background location permission is requested.
• Notifications: used for new mail, reminders, background connection status, and related actions you enable.
• Alarms and startup: used to deliver reminders, return snoozed mail, and restore scheduled work after a restart or app update.
• Network and foreground service: used to synchronize and, when push is enabled, keep a visible background connection to your JMAP or IMAP server. A supported UnifiedPush distributor can alternatively carry provider notifications when you configure that option.

You can deny or revoke optional permissions in Android Settings. The related integration will stop working, while unrelated Keryx features remain available.

6. Remote images, links, and other apps

Keryx blocks remote images in messages by default. If you choose to load them for a message or trust a sender's domain, the image host may learn information normally sent with a web request, such as your IP address, request time, and user-agent details. A sender may use a unique image URL to infer that a message was opened.

External links open only after your action and are handled by your browser or another selected app. Opening, sharing, or saving an attachment gives the destination app or storage provider access to that file under its own privacy practices.

7. Backups and exported files

A Keryx backup is created only when you request one. It contains account addresses and server settings, appearance, sending identities and signatures, folder and app preferences, and trusted remote-image domains. It also contains local productivity records, including templates and snippets, saved searches, follow-up reminders, private message notes, task-to-message links, and folder colors. These records can contain private text, message subjects, search terms, and identifiers. A backup does not contain passwords, full mail messages, drafts, queued outgoing messages, address books, calendars, or task bodies. Restoring a backup does not grant Premium. The backup is placed where you choose through Android's file tools. Treat it as a private file; you control its storage, retention, and sharing.

8. Retention and deletion

Local account data remains on your device until it is replaced during synchronization, you remove the account in Keryx, you clear Keryx's storage in Android Settings, or you uninstall the app. Removing an account from Keryx deletes its saved credential and local cache but does not delete information from the server.

Files you saved outside Keryx, including downloads and backup files, must be deleted from their saved location separately. For full instructions, see Remove your Keryx data.

9. Support messages and website visits

If you contact us, we receive the address, content, and attachments you voluntarily send so we can respond and maintain a support record. Do not send passwords or unredacted private messages.

These public pages are delivered by Cloudflare, which may process ordinary network and security data such as IP addresses, request details, and abuse signals to operate and protect the site. The Keryx pages do not contain advertising or analytics scripts.

10. Children

Keryx is intended for adults aged 18 and over and is not directed to children. Eight Point Labs does not knowingly collect personal information from children through Keryx.

11. Changes to this policy

We may update this policy when Keryx's behavior, applicable requirements, or our business changes. We will publish the revised policy here and change the effective date. Material changes will be communicated in the app or release notes when appropriate.

12. Contact

Privacy questions can be sent to privacy@eightpointlabs.com.

Eight Point Labs LLC
4030 Wake Forest Rd Ste 349
Raleigh, NC 27609
United States