Privacy
Last updated 28 October 2026
In short
- Your email, its attachments and the search index stay on your Mac. Lea connects to your mail providers directly.
- Lea's assistant is optional. When you use her, the emails she works on go through Lea's server to an AI model to answer you. Lea's server keeps none of them, and they're never used to train AI.
- No ads, no tracking, no analytics, and we never sell anything about you.
Who we are
Lea is made by Nexbit Pty Ltd, 11 Manuka Terrace, 18 Flinders Way, Manuka, ACT 2603, Australia ("we"). For anything in this policy, write to support@getlea.net.
Lea's app is on Mac today; this policy describes it. When Lea comes to Windows and Linux, it will say what differs there.
The app on your Mac
Lea's email app is free and needs no Lea account.
- Your mail stays on your Mac. Emails, attachments, the text read from them for search, the people you write to, and your settings are kept in Lea's folder on your Mac (Library/Application Support/Lea). We don't receive any of it.
- Passwords and sign-ins are kept in your Mac's Keychain. Gmail and Outlook.com accounts sign in on Google's and Microsoft's own pages, so Lea never sees those passwords.
- Lea talks to your mail providers directly: Google, Microsoft, Apple, Yahoo or your own mail server, to fetch and send your mail.
- Setting up an account, Lea looks up your provider's settings: it asks your email domain's own settings file (sending your address, as other mail apps do) and Thunderbird's public database of mail settings (sending only the domain).
- Pictures in emails that come from the internet stay off until you choose to load them, because loading them tells the sender's servers that you opened the email.
- Updates. Once a day the app checks downloads.getlea.net for a new version. That request carries your IP address, as any request on the internet does, and nothing about your mail.
- Crash reports are sent only if you choose to, after Lea asks (or if you turn on sending them without asking). A report says where in Lea's code something went wrong: Lea's version, your macOS version, and which parts of the program were running. It never includes your mail, your files, the names of your folders, or anything that identifies you or your Mac, and we keep it without a record of who sent it. We delete crash reports after a year.
Lea's assistant
Lea's assistant is a subscription. She sorts new mail, sums up conversations, drafts replies and answers your questions. You can choose which of your accounts she reads; she reads none of the others.
What she sends, and when
- When you ask a question: your question, the words around what her search found in your emails and attachments (at most 12 emails and 4 files), and, if a conversation is open in Lea as you ask, its emails.
- When she sorts new mail: each new email's sender, subject and the start of its text.
- When she sums up a conversation: that conversation's emails.
- When she drafts a reply: the email you're replying to and a few of the emails you've sent, so the draft sounds like you.
Where it goes
The app sends it to Lea's server, which passes it to an AI model and returns the answer. Today the model is OpenAI's, reached through Cloudflare's AI Gateway.
- Lea's server doesn't store what you send, and its logs never contain it: they record only which kind of job ran, which model answered, how much it used and whether it worked.
- The AI Gateway's logging is turned off for Lea.
- The AI model's provider uses it to answer you and doesn't use it to train AI. Under its policy, the provider may keep it for a limited time to detect abuse, then deletes it.
Your Lea account
To subscribe you sign in with your email address. Lea's server keeps:
| What | Why | How long |
|---|---|---|
| Your email address | To sign you in and match your subscription | Until you ask us to delete your account |
| A sign-in code (only a hash of it) | To check the code we emailed you (it works for ten minutes) | Until it's used, or a day after it runs out |
| Signed-in Macs (only a hash of each session) | To keep each Mac signed in | Until you sign out on that Mac |
| Your subscription's status and renewal date, and Stripe's customer number for you | To know you've subscribed | Until you ask us to delete your account |
| How much you used each day (requests and the model's tokens) | To keep use fair and costs covered | 90 days |
Payments are handled by Stripe. Your card details go to Stripe, never to us. Stripe tells us whether your subscription is active and when it renews.
Mail from Google accounts
Lea's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain words, mail from your Gmail account is used only to show it to you, to search it, to act on it when you ask, and, if you turn on Lea's assistant for that account, to answer you. It's never used for ads, never sold, never used to train AI, and no one at Nexbit reads it.
Who else is involved
| Company | What they do for Lea |
|---|---|
| Cloudflare | Runs Lea's server, its AI Gateway, the sign-in emails, the downloads and this website |
| OpenAI | The AI model behind Lea's assistant |
| Stripe | Subscriptions and payments |
They act on our instructions and their own privacy terms. We don't share anything about you with anyone else, except where the law requires it.
This website
getlea.net sets no cookies and has no analytics or tracking. One small script on the home page picks the download for your computer and turns the pictures of Lea; it runs in your browser and sends nothing. Like any website, its host sees your IP address when you visit. The fonts come from Google Fonts.
Why we use it
- Your Lea account, sign-in and subscription, and what Lea's assistant sends to answer you: to give you the service you signed up for.
- Daily usage and sign-in limits: to keep use fair and Lea's server safe from abuse.
- Crash reports: only with your agreement. You choose each time, or turn sending without asking on or off in Settings.
Where it's handled
We're in Australia. The companies above handle what they receive for Lea in the United States and other countries.
Your choices and rights
- Stop using Lea's assistant at any time: cancel your subscription in the app (Settings, Assistant, Manage subscription) and sign out.
- Ask us for a copy of what we keep about you, to correct it, or to delete your Lea account and everything kept with it: write to support@getlea.net. We'll do it within 30 days.
- Remove an account in Lea's Settings and its mail is gone from your Mac; your mail stays with your provider. Deleting the app alone leaves Lea's folder (Library/Application Support/Lea) for you to delete.
- Depending on where you live (for example in Australia, the EU, the UK or California), the law gives you further rights, including to complain to a data protection authority. In Australia that's the Office of the Australian Information Commissioner (oaic.gov.au); we'd like to hear from you first, at support@getlea.net.
Children
Lea isn't meant for children under 16, and we don't knowingly keep information about them.
Changes
If we change this policy, we'll update it here with a new date, and tell you in the app before a change that affects what's sent or kept.