Plume by RmoonENFR

Privacy policy

Last updated on November 3, 2026.

This policy explains which data Plume, the email client for macOS and Windows, handles, where that data goes and what choices you have. It also covers the Plume page on rmoon.me and its waitlist.

In short

  • Your mail, calendar and settings are stored on your computer. Rmoon runs no server that receives or reads them.
  • Passwords and access tokens are kept in your system’s keychain.
  • The app contains no analytics, no advertising and no tracking, and your data is never sold.
  • AI features are optional. When you connect a provider, the content they need goes directly from your computer to that provider.

Who is responsible

Plume is designed and published by Vincent Rodriguez (Rmoon), an independent designer based in Bordeaux, France, who is the data controller for the processing described here. For any question about this policy or about your data, write to hi@rmoon.me.

Data kept on your computer

Plume works locally. To show your mail quickly and to search it offline, it keeps the following on your computer.

  • Your account settings, such as your address and your mail server details.
  • A copy of your recent messages, in a local database that powers full-text search.
  • Your calendar events, signatures and preferences.

Passwords, sign-in tokens and AI provider keys are stored in the system keychain (Keychain on macOS, Credential Manager on Windows), never in the database or in logs. Removing an account in Plume deletes its credentials, its cached messages and its events from your computer. Uninstalling Plume and deleting its app data removes everything else.

Your mail providers

Plume connects directly from your computer to your mail provider (Gmail, iCloud, Fastmail, Yahoo or any IMAP and SMTP server) over encrypted connections. Your messages travel between your computer and your provider only, and your provider’s own privacy policy applies to the mail it hosts.

Google accounts

Gmail accounts sign in through Google. Plume asks for the following permissions.

  • Your basic profile and email address (openid, email, profile), to identify the account you add.
  • Full access to Gmail (https://mail.google.com/), to read, send, organize and delete your mail over IMAP and SMTP.
  • Your calendar events (calendar.events), to show, create and edit events and to send invitations. You can leave this permission unchecked on Google’s consent screen.
  • The list of your calendars (calendar.calendarlist.readonly), to show each of them with its name and color.

Data received from Google is used only to provide Plume’s features to you. It stays on your computer and is never transferred to Rmoon, and Rmoon never uses it for advertising, never sells it and never uses it to train AI models. It reaches a third party only when you connect an AI provider yourself, as described below.

Plume’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke Plume’s access at any time from your Google account permissions.

AI features

AI features stay off until you connect a provider of your choice, such as Anthropic, OpenAI or xAI, with your own API key or subscription. Plume then uses it to write the digest of your unread mail, summarize threads, draft replies, sort new mail in the background and adjust the app’s look.

For these features, Plume sends the provider the content they need, which is the visible text of the messages concerned along with their sender, recipients, date and subject. Hidden content is removed first, and background sorting skips security codes and sign-in emails. Requests go directly from your computer to the provider, never through Rmoon. The provider’s own terms and privacy policy govern how it processes and retains this data, so please review them before connecting it. Plume keeps a count of your AI usage on your computer, which you can reset in Settings.

Other connections Plume makes

  • Updates. Plume checks for new versions on GitHub, where its releases are published. GitHub sees your IP address as it would for any download, and Plume sends no identifier.
  • Remote images. Images hosted outside a message stay blocked until you allow them, because loading them can tell the sender that you opened the message.
  • Sender pictures. This option is off by default. When you turn it on, Plume requests sender pictures from Gravatar, which receives a hash of the sender’s address, and from DuckDuckGo, which receives the sender’s domain.
  • Unsubscribing. When you unsubscribe from a sender, Plume contacts the unsubscribe address that sender provides, either a web link or an email address.

The Plume page and its waitlist

When you join the waitlist on rmoon.me, your email address and the language of the page are sent to Vincent Rodriguez through Resend, an email service, and stored there as a contact. They are used only to send your invitation and news about access to Plume, on the basis of your consent. Your address is kept until you ask for its removal or until the waitlist is no longer needed.

Visits to the page are measured with Plausible, which uses no cookies and collects no personal data. The site is hosted by Vercel, whose servers keep standard technical logs, and the page loads the Inter typeface from Google Fonts, which receives your IP address.

Your rights

Under the GDPR, you have the right to access, correct and delete your data, to object to or restrict its processing, to receive a copy of it and to withdraw your consent at any time. Most of the data Plume handles stays on your computer, where you control it directly. For the waitlist or any other request, write to hi@rmoon.me. You may also lodge a complaint with the CNIL, the French data protection authority.

Changes to this policy

If this policy changes, the new version will be published on this page with a new date at the top.