MyOfficePilot ← Back to home
🇩🇪 DE🇬🇧 EN🇪🇸 ES

This translation is provided for convenience. In case of doubt, the German version is legally binding.

Privacy Policy

Last updated: September 2026

In short: MyOfficePilot is an app that runs on your Apple device. Your emails are retrieved directly between your device and your email provider (IMAP/SMTP); email content is not synchronised via iCloud. Calendar events, tasks and app settings are processed locally on the device and – if you use iCloud – synchronised between your devices through your own iCloud. The provider operates no server of its own and never has access to your emails or credentials.

1. Controller

The controller responsible for data processing is:

Christian Höpker
Büttnerstr. 8
63165 Mühlheim am Main
Germany

Phone: +49 (0) 1752495089
Email: info@myimmopilot.de

2. What data does MyOfficePilot process?

MyOfficePilot is an app for iPhone, iPad and Mac for managing emails, calendar events and tasks. The following data is processed and stored exclusively locally on your device:

  • Email data: messages, senders, subjects, content and the folder structure of your email accounts
  • Calendar data: events, descriptions, time periods
  • Task data: task titles, descriptions, due dates, priorities
  • Labels and categories used to organise your content

The legal basis is Art. 6(1)(b) GDPR (provision of the app’s functions). No data is transferred to servers of the provider.

3. Email accounts and direct connection (IMAP/SMTP)

To use the email functions you enter the credentials of your own email accounts. MyOfficePilot establishes the connection for retrieving and sending emails directly between your device and your provider’s email server (IMAP/SMTP over encrypted connections, SSL/TLS). The provider of MyOfficePilot is not involved in this connection and cannot see the transmitted content.

4. Credentials and passwords (iOS/macOS Keychain)

Passwords and OAuth tokens of your email accounts are stored exclusively in the Keychain of your Apple device – Apple’s secure, encrypted credential store. This data never leaves your device and is at no time accessible to the provider.

5. Synchronisation via iCloud (CloudKit)

If you are signed in to iCloud on your device, MyOfficePilot synchronises your app data (e.g. account settings, tasks, labels) between your own Apple devices via your private iCloud database. Email content is expressly excluded from this and is not transferred via iCloud (see section 6). This synchronisation takes place within your Apple account; the data is processed by Apple and is not accessible to the provider. Legal basis: Art. 6(1)(b) GDPR. Processing by Apple is governed by the Apple Privacy Policy. You can disable iCloud synchronisation in the iOS/macOS system settings.

6. Sign-in via Microsoft 365 / Google (OAuth)

For Microsoft 365 or Google email accounts you can sign in using OAuth (XOAUTH2). You are redirected to the sign-in page of the respective provider; MyOfficePilot only receives an access token and never your password. Authentication takes place directly between your device and the provider:

  • Microsoft 365: Microsoft Privacy Statement
  • Google: Google Privacy Policy

Legal basis: Art. 6(1)(a) GDPR (consent given by an active user action).

Google accounts (Gmail) – scope and limited use

When you sign in with “Sign in with Google”, MyOfficePilot requests the scope https://mail.google.com/. This scope is used exclusively to display, search, organise (move/flag/delete), compose, reply to and send your own emails directly in the app via the standard IMAP and SMTP protocols – i.e. the core functions of an email client. Gmail does not offer a narrower scope for IMAP/SMTP access.

Email content is not synchronised via iCloud. The message body is cached exclusively locally on the respective device and reloaded directly from the email server via IMAP when needed; each of your devices fetches the content independently. Only header data (subject, sender, date, read state and a short preview snippet) is synchronised between your devices via iCloud. Access tokens are stored in your device’s Keychain. There is no server of the provider to which your emails are transferred. This data is not shared with third parties, not used for advertising and not read by humans (except with your explicit consent, for security/abuse reasons or where required by law).

MyOfficePilot’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke the access you granted at any time at myaccount.google.com/permissions.

Artificial intelligence: For features such as summaries, reply suggestions and task detection, MyOfficePilot uses exclusively the on-device Apple Intelligence processing. Email data does not leave your device for this purpose. Data obtained from Google APIs is not used or retained to develop, improve or train generalised AI or ML modelsand is not transferred to third parties for such purposes.

Retention and deletion of Google user data

How long data is retained

  • Message bodies are held on your device exclusively as a cache, not as an archive. The cache is capped in size: older message bodies are discarded automatically as newer ones arrive. Attachments are not stored in it at all.
  • Header data (sender, subject, date, read state, short preview snippet) remains on the device and – if you use iCloud – in your own private iCloud for as long as the account is connected in the app.
  • Access tokens are stored exclusively in your device’s Keychain and remain valid only until you revoke access.
  • The provider retains no Google user data. There is no provider server, no backup and no archive held by the provider.

How to delete data

  • Remove the account in the app (Settings → Email → Account → Remove account): this immediately deletes the access token and any stored passwords from the Keychain, all cached message bodies and header data of that account, and the associated folders. The deletion also applies to the iCloud copy and therefore to your other devices.
  • Uninstall the app: all locally stored app data is removed from the device together with the app.
  • Revoke access at Google: at myaccount.google.com/permissions you can withdraw the permission at any time. The app immediately loses all further access to your mailbox.

Your emails at Google itself are unaffected – the app deletes nothing in your Google account that you have not deleted yourself.

7. What MyOfficePilot expressly does NOT use

  • No tracking services (no Google Analytics, no Firebase, no Mixpanel)
  • No advertising IDs or ad networks
  • No location data
  • No third-party analytics
  • No backend servers of our own for storing your data
  • No sharing of your data with third parties for advertising purposes

8. Obtaining the app and third parties

The app is downloaded via the Apple App Store. When obtaining and using the App Store, Apple processes data in accordance with the Apple Privacy Policy. The provider only receives anonymised, aggregated statistics from Apple (e.g. number of downloads), but no personal data of individual users.

9. Retention period

  • Email, calendar and task data: remains on your device (or in your iCloud) until you delete it in the app or uninstall the app
  • Credentials (Keychain): remain in the Keychain until the account is removed in the app or the app is uninstalled

For Google user data, the information in section 6 additionally applies.

10. Website myofficepilot.de

The website myofficepilot.de serves solely to provide information about the app. It uses no cookies, no tracking and no third-party analytics services. When the website is accessed, the hosting provider may, for technical reasons, process server log files (e.g. IP address, time, page requested); these serve exclusively to ensure secure operation (Art. 6(1)(f) GDPR) and are deleted after a short period.

11. Your rights as a data subject (Art. 15–22 GDPR)

You have the following rights vis-à-vis the controller with regard to your personal data:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR): since all data is stored locally on your device, you can delete it at any time directly in the app or by uninstalling the app.
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection (Art. 21 GDPR)
  • Withdrawal of consent (Art. 7(3) GDPR): you can withdraw consent you have given (e.g. OAuth connections, iCloud) at any time in the app or in the iOS/macOS system settings.

To exercise your rights, please contact: info@myimmopilot.de

12. Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
(Hessian Commissioner for Data Protection and Freedom of Information)
Postfach 3163
65021 Wiesbaden, Germany

Phone: +49 611 1408-0
Email: poststelle@datenschutz.hessen.de
Website: https://datenschutz.hessen.de

13. Currency and changes to this privacy policy

This privacy policy is current as of September 2026. As the app evolves or legal requirements change, it may become necessary to amend this privacy policy. In case of doubt, the German version is legally binding.