ES Mail — Privacy policy
Effective 29 October 2026. ES Mail is published by Email Solutions (es.jo), Amman, Jordan.
ES Mail is the mail app for mailboxes hosted by Email Solutions and the providers who use its mail servers. It shows the mail, calendar and contacts that are already on your mail server; it does not create a second copy of your mail anywhere else. In short: no ads, no analytics, no tracking, and nothing is sold.
What the app handles, and why
| Data | Why | Where it goes |
|---|---|---|
| Your email address | To find the server that holds your mailbox (email-first sign-in), and to sign you in. | Our mail servers only. The look-up uses the address's domain and public DNS records. |
| Your mail password | To sign in. | Sent once, over HTTPS, to your own mail server. It is not stored on the phone. |
| A sign-in session | To keep you signed in. | Kept in the phone's secure storage (iOS Keychain, Android Keystore). Signing out, or removing the device under Settings → Devices, ends it on the server. |
| Your mail, calendar and contacts | To show them, and to send what you write. | They stay on your mail server. The app reads them over HTTPS and keeps no copy beyond what is on screen and the phone's normal web cache. |
| Other accounts you add (Gmail, Outlook…) | To bring their mail into your mailbox and send from them. | Your mail server connects to that provider. The password you give is stored encrypted on your mail server, never on the phone. |
| Notification token, and new-mail alerts | To tell you when new mail arrives. | Your mail server sends the sender's name and the subject to your phone through Apple's push service on iPhone, or Google Firebase Cloud Messaging on Android — the one way each phone receives notifications. Turn notifications off at any time in Settings. |
| Device model | Shown to you under Settings → Devices, so you can recognise your phone. | Your mail server. |
| Face ID / Touch ID / fingerprint | Optional app lock. | Handled entirely by the phone. The app only learns "unlocked" or "not unlocked"; no biometric data ever leaves the device or reaches us. |
| Files you share into the app | To attach them to a new message. | Only sent when you send that message. |
What we do not do
- No advertising, advertising IDs or tracking across apps and websites.
- No analytics or crash-reporting services in the app.
- We do not sell, rent or share your data with anyone for their own use.
- We do not read your mail. Automated systems on the mail server filter spam and viruses, as every mail service does.
Security
All connections use HTTPS (TLS). Sessions are stored in the phone's secure hardware-backed storage. You can turn on two-step sign-in, and see and sign out every device, in Settings.
Keeping and deleting
Signing out removes your session and notification registration from that phone and from the server. Your mailbox itself is provided by your company or your email provider: to close it or delete its data, ask them, or write to support@es.jo and we will help.
Children
ES Mail is a business mail app and is not directed at children under 13.
Changes and contact
If this policy changes, the new version is published here with its date. Questions: support@es.jo.