Yours,and it stays yours.
Your mail is encrypted on your own disk, and you hold the key. Credentials travel from your machine to your provider and stop there — and anything the app does on your behalf leaves a receipt you can read.
- The exit door
- Leaving is a feature. Any conversation exports as .eml, and snooze rides IMAP keywords other clients can read — leaving doesn’t strand your triage.
- The AI, itemized
- Every call is stamped with the model, the prompt version, tokens in and out, and what it cost — tagged with how that number was reached. A pause switch and a monthly cap sit above every paid provider.
- Optional, honestly
- Every feature has a version that runs with no model connected, and the app says which one you’re getting. Promise detection is a regular expression.
- Agents, with the keys kept
- An agent can read, search, file and draft. It cannot send until you grant that scope — and the refusal happens in Rust, not the interface.