Privacy Policy

Last updated October 14, 2026

Alpine is an email client for Gmail made up of two parts: the Alpine apps for iPhone, iPad and Mac, and an optional MCP server at alpineai.dev/mcp that lets AI agents you choose work with your Gmail. This policy explains what data each part accesses, how it is used and stored, and how to remove access. The short version: your mail stays between you, Google and the agents you connect. We don't sell it, advertise with it or train AI models on it.

Google account data we access

When you sign in with Google, Alpine requests these permissions:

• Basic profile (openid, email, profile): your name and email address, to identify the signed-in account.
• Gmail (https://www.googleapis.com/auth/gmail.modify): to read, search and display your messages, threads, labels and attachments; to archive (clear), star, label, mark read or unread and move messages to Trash; and to create drafts and send email when you ask it to. Alpine does not permanently delete mail.

The Alpine apps

• The apps talk directly to Gmail from your device. No Alpine server receives, stores or relays the mail you read in the apps.
• Your Google sign-in tokens are stored in your device's Keychain. Mail may be cached on your device so the apps are fast and work offline; this cache stays on your device and is removed when you sign out or delete the app.
• The apps contain no advertising and no third-party analytics or tracking.
• This website uses Cloudflare Web Analytics, which counts page views without cookies or cross-site tracking.

The MCP server for AI agents

The MCP server is only used if you connect an AI agent (for example Claude) to https://alpineai.dev/mcp. When you do:

• You approve the connection and sign in with Google. The server receives Google OAuth tokens for your account and uses them only to perform the actions your agent requests through Alpine's tools, such as listing threads, reading a thread, clearing threads, applying labels, creating drafts or sending email.
• Your Google tokens are stored encrypted inside the authorization grant for that agent, in Cloudflare Workers KV. They can only be decrypted with the access token held by the agent you connected. The server does not store your email: messages are fetched from Gmail at the moment your agent asks and are passed straight to that agent.
• The content returned to your agent is then handled by that agent's provider under its own privacy policy (for example, Anthropic for Claude). Choose agents you trust.
• Operational logs (such as request times and errors) are kept by our hosting provider, Cloudflare, for a limited period to keep the service running and secure. They do not contain your message content.
• Connections are limited to accounts the server's operator has explicitly allowed.

How we use and share data

• We use Google user data only to provide and improve the user-facing features described above.
• We do not sell Google user data, use it for advertising, or use it to train or improve AI or machine-learning models.
• We do not transfer it to anyone except as needed to provide the service (Google, Cloudflare as our host, and the AI agent you choose to connect), to comply with applicable law, or as part of a merger or acquisition with notice to you.
• No person at Alpine reads your mail, unless you explicitly ask us to for support, it is necessary for security purposes such as investigating abuse, or it is required by law.

Google API Services User Data Policy

Alpine's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Removing access and deleting data

• Disconnect an agent: remove the Alpine connector or MCP server in your agent (for example claude mcp remove alpine, or the connector settings in Claude). Unused grants expire after 90 days.
• Revoke Google access: visit your Google Account's Third-party apps & services page and remove Alpine. This immediately invalidates the tokens held by the apps and the MCP server; the MCP server then discards the grant the next time it is used.
• Apps: sign out in the app to remove its Keychain tokens and on-device cache.
• To ask us to delete any data associated with you, email hello@alpineai.dev.

Security

All connections use HTTPS. OAuth tokens are stored encrypted (in the Keychain on your device, and encrypted at rest in the MCP server's grant storage). We request only the access needed for the features above.

Children

Alpine is not directed to children under 13 and we do not knowingly collect their data.

Changes

If we change this policy we'll update the date above, and for material changes we'll give notice in the app or on this site.

Contact

Questions or requests: hello@alpineai.dev.