Privacy policy

DMCN LLC created the DMCN protocol, maintains its open specification and reference implementation, and owns the DMCN name. It operates this service — the apps, websites and relay infrastructure behind the addresses we issue — and is the controller responsible for the limited information described in this policy.

It does not own the DMCN network. The protocol is open and the server software is published under Apache-2.0, so anyone can run DMCN nodes on their own domain. This policy covers only what we operate: mail you exchange with an address on someone else’s DMCN domain is handled by that operator under their own practices, not ours.

Questions about this policy, or about the information we hold, can be sent to us at the address on our contact page.

We designed DMCN to minimize the data we hold. Where ordinary email providers can read your messages, we cannot: your mail is encrypted on your device and we only ever handle the encrypted version between DMCN inboxes.

We cannot read the contents of your DMCN-to-DMCN mail, and we do not hold your encryption keys. We do process a limited amount of operational data needed to run the Service, such as your address and billing status.

Mail sent to or received from a regular email address is decrypted at the bridge to interoperate with standard email; it is protected in transit but is not end-to-end encrypted.

Account data: your DMCN address and settings. Billing data: your plan and payment status (payments are handled by our payment processor; we do not store full card numbers). Operational logs: minimal metadata needed for reliability and abuse prevention, retained for a limited period.

We do not use advertising, third-party trackers, or content scanning. We do not sell or rent your data. Remote images in mail are blocked by default to prevent tracking pixels.

We keep operational data only as long as needed to provide the Service and meet legal obligations. When you delete your account, we delete associated data within a reasonable period, except where we must retain limited records by law.

Depending on where you live, you may have rights to access, correct, export or delete your personal data. You can export your mail at any time and delete your account from settings. Contact us to exercise any additional rights.

We use a small number of processors (for example, payment and infrastructure providers) strictly to operate the Service. They are bound to handle data only on our instructions and cannot access the contents of your encrypted mail.

We may update this policy as the Service evolves. If we make material changes, we will notify you in the app or by email before they take effect.