Privacy policy

Last updated 10 November 2026

In short: our apps keep your settings on your own device and talk only to the servers you choose. We don't receive your data, and we use no analytics, advertising or tracking in our apps or on this website.

Who we are

D C Hardy Ltd is the data controller for this website and for apps we publish. We are registered in England and Wales, company number 09901140, with our registered office at 123 Cross Lane East, Gravesend, Kent, DA12 5HA.

Our apps

This section covers every app we publish on Google Play and the App Store, including our mail server administration app. Where an app handles data differently, it has its own section below.

No account with us. You don't sign up with D C Hardy Ltd to use our apps.
No analytics, advertising or tracking. Our apps contain no analytics, advertising, crash-reporting or tracking software, and we don't track you across other apps or websites.
Nothing sent to us. Our apps don't send any data to D C Hardy Ltd.
Encrypted connections only. Our apps connect only over HTTPS and check each server's certificate.

Mail server administration app

This app manages a Mail-in-a-Box mail server that you, or your organisation, run. It works with the following data:

Server details you enter: the server's address and the sign-in details of a service account the app creates on that server. These are stored only on your device, encrypted with your device's secure key storage (Android Keystore or the iOS Keychain).
Your administrator sign-in: when you first add a server, you sign in with an administrator account and its two-factor code. These are sent only to your server, to create the app's service account, and are not stored.
Server information you view or change: mail users, aliases, DNS records, certificates and backup status are read from and sent to your server. While the app is open they are held in memory, and they are not saved on the device.
Biometric unlock: if you turn this on, your fingerprint or face is checked by your device's operating system. The app never receives or stores biometric data.

The app makes network connections only to the servers you add. Your organisation, as the operator of the mail server, is responsible for the personal data held on it.

Removing your data

Removing a server in the app deletes its stored details from your device, and uninstalling the app deletes everything it stored. The service account remains on your mail server until you delete it there, and the app shows you how.

This website

This website sets no cookies and uses no analytics or third-party scripts.

Like most web servers, ours records each request: your IP address, the page requested, the time and your browser's identification. We use these logs only to keep the site secure and working, under our legitimate interest in doing so. They are kept for 14 days and then deleted. The site is hosted on our own server in Europe.

When you contact us

If you email or phone us, we use your contact details and what you tell us to reply and to provide any service you ask for. We keep this correspondence only as long as needed for that purpose and for our legal and accounting obligations.

Sharing your data

We don't sell personal data or share it for marketing. Google and Apple, who distribute our apps, process data about downloads and purchases under their own privacy policies.

Children

Our apps are tools for system administrators and are not directed at children.

Your rights

Under UK data protection law you can ask us for a copy of the personal data we hold about you, and ask us to correct, delete or restrict it, or object to how we use it. Contact us as above. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes to this policy

We will update this page if how we handle data changes, and change the date at the top when we do.