How 2Sentence keeps your email safe

Handing an app your email is a big ask. This page explains, in plain words, exactly what happens to your email, who can see it, and how you can check for yourself instead of taking our word for it.

What happens to a new email

1. It arrives in your mailbox: Gmail, Outlook or your college mail, as always. 2Sentence never sits between you and your email: if 2Sentence stopped tomorrow, your inbox would work exactly the same.
2. 2Sentence reads it, read-only: Google and Microsoft give 2Sentence a read-only permission (gmail.readonly, Mail.Read). It cannot send, delete, move or change any email. The permission screen you agree to says this, and you can check or remove it on Google’s or Microsoft’s own site at any time.
3. Software writes two lines: An AI model turns the email into two lines: who wrote, what they need, by when. That’s our own model on our server, or Cloudflare Workers AI; Pro gets the stronger model first. Neither keeps your email or uses it to train AI.
4. The email text is thrown away: For Gmail, Outlook and IMAP, the text is processed in memory and never written to storage. Only the two lines are kept. Emails you choose to forward to your private 2Sentence address are the one exception: they’re kept encrypted for 30 days so you can open them, then deleted.
5. You open it, fresh: When you tap an email, it’s fetched again from your mailbox and shown in a locked frame that can’t run code. Hidden tracking images, which tell senders when and where you opened an email, are removed first.

Who can see your email

No person at 2Sentence: Summaries are written by software. The team’s tools don’t show email, and nobody opens your mailbox. The only way a person would ever see an email is if you send it to us yourself, for example to report a wrong summary.
Not advertisers: Your email never chooses an ad and is never shared with anyone for advertising. The web app shows no ads at all.
Not other users: Every request is checked against your own account on our server, so one person can never reach another person’s mailbox.

The locks

Encryption: Everything travels over HTTPS. The keys that let 2Sentence read your mailbox, app passwords and forwarded emails are stored encrypted with AES-256.
Sign-in protection: Your sign-in can’t be read by scripts on the page. When your account is used on a new device, you get a notification and an email, and Settings → Privacy & security shows every device with “Sign out everywhere else”.
Safe email display: Email is cleaned on our server and shown in a sandbox with scripts turned off, so a harmful email can’t run anything in the app.
Tracker blocking: Tracking pixels and remote style tricks are removed, and the app shows how many it blocked.

You’re in control

Try it without your email: Look around with example emails, or start as a guest, before connecting anything.
Private mode: AI on your phone: On Android phones (64-bit, about 4 GB of memory or more), turn on Private mode and your email is summarized on the phone itself, by Google’s on-device AI or a small AI model the app downloads once. Ask, Explain, writing help and PDF notices run on the phone too, in any language the phone can translate. Our server sends none of it to any AI company.
Share only what you choose: Instead of connecting a whole mailbox, you can forward only the emails you pick (for example, just your college’s) to a private 2Sentence address.
Cut access without asking us: Remove 2Sentence at Google or Microsoft and it stops reading immediately.
Take everything, or delete everything: Download all your data in one file, or delete your account and everything in it, from Settings → Privacy & security.

Where we are, honestly

Google verification: Reading Gmail requires Google’s verification and an independent yearly security assessment (CASA). We’re working through it; until it’s done, Gmail connects for a limited number of people, and anyone can use forwarding instead.
Who we are: 2Sentence is made by {{COMPANY}}, a registered business in Andhra Pradesh, India. Read about the people behind it on the About page.
Found a problem?: If you think you’ve found a security issue, email {{CONTACT_EMAIL_LINK}}. We reply quickly and credit people who report problems responsibly. Details are in our security.txt.

The full legal details are in the privacy policy.