Privacy statement for Rukoo accounts

Last updated 2026-10-27. Nederlands

Who is responsible

Bart van der Meeren runs this server and decides what it does with your data. Contact: https://bvdm.ai/nl/contact.

What this service is

A Rukoo account keeps your inbox categories, the category each email got and your corrections the same on your devices that use Rukoo, the open-source mail app. Your mail, your mail passwords and your Google sign-ins never pass through this server.

What we keep

• Your email address, which is your sign-in name. We don’t send mail to it and don’t check it.
• A check value derived from your password on your device. It lets the server confirm your password; it isn’t your password, and the server can’t turn it back into one.
• Your encrypted records. Your devices encrypt them with a key that only they have, so we can’t read them: not your categories, not your corrections, not which email went where.
• Your encrypted data key, wrapped by your password and by your recovery key. We can’t open it.
• The names and platforms of your devices, when each one signed in and when it last connected.
• How many records you have, how large they are and when they change.
• Failed sign-in attempts, to lock an account for 15 minutes after ten of them.

Your IP address reaches Cloudflare with every request. The server uses it only to limit how often one address may try to sign in, and doesn’t store it. Cloudflare may keep it in its own logs for a short time.

Why

We use this data to give you the account you asked for: signing in, syncing your devices and showing your devices and usage (the agreement with you, article 6(1)(b) GDPR). Rate limits and the sign-in lock protect your account and the service (a legitimate interest, article 6(1)(f) GDPR). We don’t use it for anything else: no analytics, no advertising, no profiles, and we don’t sell or share it.

Where it is kept, and who helps

The server runs on Cloudflare, a service of Cloudflare, Inc. in the United States, which processes the data on our behalf under its data processing terms. Accounts are stored and handled in the European Union. Because Cloudflare is a US company, US law applies to it, also for data kept in the EU. What it could be made to hand over is the list above: your records stay encrypted with a key Cloudflare doesn’t have.

How long

We keep your account until you delete it. Delete account in Rukoo (Settings, Rukoo account) removes the account and every record at once. Cloudflare keeps backups of the storage that can bring back its state from up to 30 days before, so deleted data is fully gone after that. Inactive accounts aren’t deleted on their own; ask us if you want yours removed and can no longer sign in.

Your rights

You can see what is stored about you on the What’s stored and shared page in Rukoo, export everything with Export my data, change your password and delete your account yourself. For anything else, such as a copy of the data we hold or an objection, contact us. You can also complain to a data protection authority, such as the one in the country where you live.

Security

Your password goes through Argon2id on your device, and your records are encrypted with AES-256-GCM before they leave it. We can’t reset your password: without your password or your recovery key, nobody can open your data, including us. The Rukoo account protocol describes exactly how it works.

Changes

When this statement changes in a way that matters to you, the date at the top changes too.