Novit

Novit Privacy Policy

Last updated: 16 September 2026

Novit ("Novit", "we", "us", or "our") is an email app for Android. It connects directly to the email accounts you add and organises your mail on your device.

This policy explains what Novit accesses, where that information goes, and how you can remove it.

In short: Novit has no servers of its own. Your mail, contacts and sign-in details stay on your device and travel only to your own email provider. Novit has no user accounts, no analytics, no advertising, and no crash-reporting or tracking services, and it never sends your mail to an AI or language model. The only thing Novit runs online is its website, which serves static pages with no cookies and no analytics (section 10).

1. Information Novit accesses

From the email accounts you add

  • Your email address, account name, and server settings
  • Email messages and their contents, including attachments
  • Sender and recipient addresses, subject lines, dates, and other message headers (including authentication results such as DKIM, SPF and DMARC)
  • Folders, and message status such as read, archived, or flagged
  • Drafts, sent messages, and messages you queue to send

From your device, only when you choose to

  • Contacts — see section 5.
  • Files you attach — Novit reads a file only when you pick it to attach to an email.
  • Notifications — Novit asks for permission to post notifications; see section 6.

Novit accesses this information only to provide the features you use.

2. How your email is handled

Novit connects directly from your device to your email provider's servers using standard email protocols (IMAP to read mail, SMTP to send it). There is no Novit server in between, and Novit does not operate or host your email account.

Novit processes your mail on your device to show, search and organise it. This includes sorting messages into sections such as mail that needs a reply, mail you are waiting on, orders, invoices, bookings, offers, one-time codes, account alerts and bulk mail. That sorting is done by fixed, deterministic rules that run on your device. Your mail is not sent to any language model or AI service, and it is not used to train any model.

Novit does not send your email, attachments, contacts, or any other mailbox information to us or to any third party, other than your email provider (and, for sign-in, your identity provider — see section 4).

3. Email providers and finding your server

When you add an account, Novit communicates with the provider that runs it — for example Google, Microsoft, Apple, Yahoo, Fastmail, or your own mail server. Those providers handle your information under their own privacy policies and terms, which Novit does not control.

To find your mail server from the address you type, Novit uses a list of known providers built into the app, or tries server names based on your email domain. It does not look your address or domain up with any third-party service.

When you send an email, it is delivered through your provider to the people you address, as with any email.

4. Sign-in information

Depending on your provider, Novit connects using either:

  • An app password that you create with your provider and paste into Novit; or
  • Sign-in through your provider (for example "Sign in with Microsoft"). This opens your provider's own sign-in page in your browser. You never type your password into Novit; your provider gives Novit an access token instead.

App passwords and tokens are stored in the Android Keystore on your device, encrypted by the operating system. They are sent only to your mail server and, for tokens, to the identity provider that issued them so they can be renewed. They are never sent to us or to anyone else, and are never used for advertising or profiling.

You can revoke Novit's access at any time from your provider's account security settings, or by removing the account in Novit.

Google user data

Where Novit offers sign-in with Google, Novit's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to provide Novit's user-facing email features on your device. It is not transferred to anyone except as needed to provide those features, is not used for advertising, is not sold, and is not read by humans.

5. Contacts

Novit uses your device's contacts in two ways, both optional. Android asks for the contacts permission the first time either one is used.

  • "Use your contacts" setting (off by default). When you turn it on, Novit reads the names, email addresses, company, job title, and thumbnail photos in your address book, so it can show the people in your mail by the names and photos you already use.
  • Choosing a recipient. When composing, you can pick a contact with Android's contact picker; Novit reads the email addresses of the contact you pick.

Novit never adds, changes or deletes your contacts, and your contacts never leave your device. Turning the setting off stops Novit reading them.

6. Notifications and background sync

With notifications on, Novit checks your accounts in the background about every 15 minutes while the app is closed, sends any queued messages, and posts a notification for new mail or for a message that could not be sent.

These are local notifications created on your device. Novit does not register your device with any push-notification service (such as Firebase Cloud Messaging) and does not create a push token.

Notifications can show a sender, a subject, or a one-time sign-in code, and may appear on your lock screen depending on your Android settings. You can turn notifications off in Novit's settings or in Android's settings.

7. Images and links in email

Images in an email may be stored on the sender's own server. When Novit loads such an image, that server can see your IP address and that the email was opened — this is how many senders track opens.

  • Original emails: remote images are off by default. Novit shows a notice and loads them only if you tap to load them, or turn on "Load remote images in original emails".
  • Bulk mail (Feed): "Load images in bulk mail" is on by default, so images in newsletters and promotional mail are fetched from the sender's server when a card is shown. You can turn this off in Settings.

Images sent inside the email itself are shown without contacting anyone.

When you tap a link — including an "unsubscribe" link — it opens in your browser or the app you choose. Novit does not follow links, or unsubscribe you, in the background.

8. Data stored on your device

So the app works quickly and offline, Novit stores the following on your device:

  • A local copy of your messages, message details and folders
  • Attachments you open (kept for up to 30 days, within a size limit)
  • Your settings, and local choices such as snoozed items and per-sender rules
  • Your sign-in details, in the Android Keystore (see section 4)

Novit excludes its data from Android's cloud backup, so it is not copied off your device that way. Information on your device is protected by your device's own security, such as its screen lock and encryption.

When you share or open an attachment with another app, that app receives the file and handles it under its own policies.

9. Sharing

Novit does not sell your personal information, and does not share it with advertisers, data brokers, or anyone else.

Information leaves your device only:

  • to your email provider, to fetch, organise and send your mail;
  • to your identity provider, to sign in and renew access (section 4);
  • to a sender's server, when an image from it is loaded (section 7); and
  • to another app, when you choose to share or open something with it.

10. Third-party services

Novit contains no third-party analytics, advertising, crash-reporting, attribution, or tracking software.

Novit is distributed through Google Play. Google may collect information about installs, updates, and app performance (such as crash reports, if you allow it in your Android settings) under Google's own privacy policy.

Novit's website, where this policy is published, sets no cookies and runs no analytics or tracking scripts. It is hosted by Cloudflare, which processes visitors' IP addresses and request details to serve and protect the site, under Cloudflare's own privacy policy.

11. Purchases

Novit does not currently offer in-app purchases or subscriptions. If that changes, purchases will be handled by Google Play, Novit will not receive your payment-card details, and this policy will be updated first.

12. Security

  • Connections to your mail servers are encrypted with TLS, and Novit checks that a server's certificate is valid for that server's name. If it is not, Novit refuses to connect and sends nothing, unless you choose to trust that server's certificate by entering its SHA-256 fingerprint.
  • Sign-in details are stored in the Android Keystore.
  • Novit's data is excluded from Android cloud backup.

No method of storage or transmission is completely secure. Please keep your device and your email accounts protected with a screen lock and strong sign-in methods.

13. Children

Novit is not directed at children under 13 (or the minimum age in your country). Novit does not collect personal information from anyone — all information stays on the device or with the user's email provider.

14. Keeping and deleting your information

Novit has no Novit account and holds no copy of your information, so there is nothing for us to keep or delete on our side. Everything Novit stores is on your device, and you control it:

  • Remove an account in Novit's settings to delete that account's sign-in details and everything cached for it.
  • Disconnect all accounts and delete cached data in Novit's settings to clear the local copy of your mail.
  • Clear Novit's storage in Android's settings, or uninstall Novit, to remove all of its data from your device.

None of these delete your email account, or any mail stored by your email provider. To remove Novit's access from your provider's side, revoke it in your provider's account settings.

15. Your rights

Because your information is held on your device and by your email provider — not by us — you can view, correct, and delete it directly in Novit or with your provider. Depending on where you live (for example under the New Zealand Privacy Act 2020, or the GDPR in the EU and UK), you may have further rights over your personal information. If you have a question or request, contact us using the details below.

16. Changes to this policy

If Novit's features or data practices change, we will update this policy and the "Last updated" date above. If Novit begins collecting, sharing, or processing information in a new way, we will update this policy and Novit's Google Play data safety information before or when that change takes effect.

17. Contact

Questions about this policy or how Novit handles your information: