Tusk – Spam & Phishing Filter: Privacy Policy

1. Who we are

Tusk is provided by ElephantApps Yazılım Danışmanlık ve Dış Ticaret Ltd. Şti., İçerenköy Mah. Topçu İbrahim Sk. No:8-10 D:5, 34752 Ataşehir, İstanbul, Türkiye ("ElephantApps", "we"). We are the data controller for the personal data described here. You can reach us at [email protected].

2. What Tusk handles

• Your Tusk account: an anonymous user identifier from Sign in with Apple, the email address Apple shares with us (which can be an Apple private relay address), your time zone and your settings.
• Your mail connection: your email address, your provider, and the app-specific password or app password you create for Tusk (iCloud Mail, Gmail) or your mail password (other providers), with your mail server's name and the name of its Junk folder. For Outlook and Microsoft 365 you sign in with Microsoft instead: Tusk never sees your Microsoft password, and receives a sign-in token (a refresh token) and your mailbox address.
• Finding your mail server: Tusk looks up the domain of your email address (the part after the @, never the address itself) in public DNS and in Mozilla's Thunderbird settings database.
• Emails Tusk checks: only new, unread emails that arrive in your inbox after you connect, and emails you move to Junk yourself. For each one, Tusk reads the headers (sender, reply-to, recipients, subject, date and email authentication results), the domains of links, the names of attachments and the first 4,000 characters of the text.
• What Tusk keeps about each checked email: the sender address and domain, the subject, the date, the Message-ID, the decision (for example "moved to Junk"), the reason and the AI scores. Tusk does not keep the body of the email, its attachments or its links.
• New emails you had already read before Tusk checked them: Tusk does not read them, and keeps only their Message-ID, so that it can learn the sender if you later move one to Junk.
• Your rules: your allow and block lists, including senders learned from your own moves to Junk, and a record of the unsubscribe requests Tusk sent for you.
• Usage: how many emails were checked and moved each month, to apply your plan's limits.
• Notifications: your device's push notification token, if you allow notifications.
• Purchases: if you subscribe to Tusk Pro, Apple sends us the transaction details (product, transaction ID, expiry date). Apple handles the payment; we never see your payment details.
• Technical logs: our servers log requests, including IP addresses, for security and troubleshooting. Logs are kept for a limited time.

3. How Tusk uses it

• To check new emails and move spam to your Junk folder.
• To show you what was moved and why, and to undo a move when you tap "Not spam".
• To apply your allow and block lists and to learn from the emails you move to Junk yourself.
• To unsubscribe you, if you keep this setting on, from senders you rejected (emails you moved to Junk or senders you blocked), using the sender's one-click unsubscribe link. This sends a request to the sender's server.
• To send the notifications you turned on, such as phishing alerts, the daily summary or a reconnect reminder. A phishing alert shows the sender's address and goes through Apple's push service.
• To apply plan limits and verify subscriptions.
• To keep the service secure and prevent abuse.

We process this data to provide the service you asked for (performance of a contract), for our legitimate interest in keeping the service secure, and where the law requires it.

4. AI analysis, and no training on your email

To decide whether an email is spam, Tusk sends the parts listed above (headers, link domains, attachment names and up to 4,000 characters of text) to the Jev model by TypeSafe, which runs on Cloudflare Workers AI. The answer is a spam assessment, nothing else.

Tusk asks your permission in the app, and sends nothing until you allow it. You can turn "AI email checks" off at any time in Settings. Nothing is sent after that, and Tusk stops checking your mail, because it cannot check it without this analysis.

Tusk does not use your emails to train AI models, and Cloudflare does not use Workers AI requests to train models. The email content is processed in memory and is not stored by Tusk.

5. Nobody reads your email

Nobody at ElephantApps reads your emails, and our tools cannot show email contents because we do not keep them. We look at the senders and subjects stored for your account only when you ask us to look into a problem, or when it is needed to keep the service secure.

6. How your mail password is protected

Your app-specific password, app password or mail password is encrypted with AES-256-GCM using a key for your account, which is itself encrypted with a master key kept outside the database. It is decrypted only in memory, to connect to your mail server over an encrypted connection (IMAP over TLS), and it is used only for Mail.

If you sign in with Microsoft, the refresh token is encrypted the same way. The short-lived access tokens made from it are kept only in memory and used only to read and move email through Microsoft Graph over HTTPS. Microsoft's mail permission covers all of your folders; Tusk works only with your inbox and Junk. You can remove Tusk's access in your Microsoft account's privacy settings (personal accounts) or at myapps.microsoft.com (work or school accounts), and Tusk stops checking your mail.

An iCloud app-specific password can also open contacts and calendars; Tusk never uses it for anything but Mail. You can revoke an app-specific password at account.apple.com, or delete a Gmail app password at myaccount.google.com, at any time, and Tusk stops checking your mail immediately.

7. Who we share data with

We do not sell your data, we show no ads, and the app contains no analytics or tracking tools.

• Hetzner Online GmbH hosts our servers and database in the European Union.
• Cloudflare, Inc. carries our network traffic and, if you allow it, runs the AI analysis of your emails (Workers AI, with the Jev model by TypeSafe).
• Apple provides Sign in with Apple, App Store purchases and push notifications.
• Your email provider (for example Apple for iCloud Mail, Google for Gmail, Microsoft for Outlook) sees Tusk sign in to your mailbox and move emails, as with any mail app. For Outlook, Microsoft also tells our server when new mail arrives; these notifications contain no email content.
• Mozilla receives your email domain when Tusk looks up your mail server.
• The sender of an email you rejected receives the unsubscribe request, if you use that setting.
• Authorities, when the law requires us to share data.

8. International transfers

Cloudflare processes network traffic and AI requests on its global network, which can be outside Türkiye and the European Economic Area. Such transfers rely on appropriate safeguards, such as standard contractual clauses.

9. How long we keep data

• Your data is kept while your Tusk account exists.
• Disconnecting an email account deletes its password or sign-in token and everything Tusk recorded for it, immediately.
• Deleting your Tusk account (Settings → Delete account) deletes all of your data immediately. Copies in server backups are removed as the backups are replaced.
• Technical logs are kept for a limited time.

10. Your rights

You can ask to access, correct, delete or export your data, to restrict or object to its processing, and to learn how it is processed. This includes your rights under Article 11 of the Turkish Personal Data Protection Law (KVKK) and under the GDPR. Most of it you can do in the app: see what Tusk moved, change your rules, disconnect accounts or delete your account. For anything else, email [email protected].

You can also complain to a data protection authority: in Türkiye the Personal Data Protection Authority (KVKK), in the EU the authority in your country.

11. Children

Tusk is not intended for children under 13, or under the minimum age for consent in your country.

12. Changes to this policy

If we change this policy, we will update this page and its date. For significant changes, we will also let you know in the app.

13. Contact

Questions about privacy: [email protected].