Privacy Policy

Last updated 12 September 2026

Your mail is not sent to us. Harkara syncs directly between your device and your mail provider. We operate no service that receives, stores, relays or reads your mail, and the app has no setting that would send it to one.

Harkara is an email client published by Bighelpers Softwares and Solution Pvt. Ltd, a company registered in India. This policy describes the app as published, and says plainly where it is precise and where it is not. Questions: admin@bighelpers.in.

The short version

We receive no personal information from the app, because it sends none to us. The app does read things on your phone — your mail, and your contacts if you allow it — and all of that stays on the device.
Your mail, contacts, attachments and settings stay on your device and with the mail provider you already use.
There is no analytics, no crash reporting, no advertising and no tracking in the app.
We do not sell, rent or share your information, because we do not hold it.
Some things you can choose to do — loading images in a message, unsubscribing from a mailing list — make your device contact the sender's servers. Those are listed below.

What the app connects to

Harkara contacts your mail provider. It also contacts a small number of other hosts, and only in the circumstances given here.

Destination	When
Your IMAP and SMTP mail servers	Whenever the app syncs or sends mail. This is the main thing it does.
Google sign-in and Gmail `accounts.google.com`, `oauth2.googleapis.com`, `mail.google.com`	Only if you add a Gmail account using Google sign-in.
Microsoft sign-in and Outlook `login.microsoftonline.com`, `outlook.office.com`	Only if you add a Microsoft account using Microsoft sign-in.
Google Drive `www.googleapis.com`	Only when you choose to attach a file from Drive. Drive may redirect the download to its own content hosts.
Hosts chosen by the sender of a message	Only if you turn on remote images. Loading images in a message fetches them from wherever the sender put them, which can tell the sender you opened the message. Harkara keeps this off by default, and otherwise asks per message.
A mailing list's unsubscribe address	Only if you tap Unsubscribe. The app sends one request to the address the message itself supplied, over HTTPS, and does not follow redirects.

None of these connections pass through a server of ours. There is no Harkara service in the path.

Google user data

If you sign in with Google, Harkara asks for these permissions and no others. Signing in to mail and connecting Google Drive are two separate consents; Drive is only asked for if you use it.

Permission	What it is for
`https://mail.google.com/`	Read, write, send and organise your mail over IMAP and SMTP — the ordinary work of a mail client. Gmail offers no narrower permission that allows IMAP access, which is why this one is requested.
`email`	So Google's own sign-in screen can show you which account you are about to connect. It is not a restricted permission and the app does not read your address from it — you type the address yourself when adding the account.
`drive.file`	Requested only if you attach a file from Google Drive. It grants access to the individual files you pick in Google's own file picker, and to nothing else in your Drive.

How Google user data is handled

Accessed: mail is fetched from Gmail's IMAP servers by your device.
Used: to show, search, compose, send and organise your mail in the app, and — if you turn the Wallet on — to find receipts, bookings and parcel tracking inside messages already on the device.
Stored: in a database on the device itself. Sign-in tokens are kept in the Android Keystore or the iOS Keychain.
Shared: with nobody. It is not transmitted to us or to any third party.
Retained: on the device until you remove the account or uninstall the app. We retain none of it, for any period, because we never receive it.

Limited Use

Harkara's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular:

Google user data is used only to provide and improve user-facing features that are prominent in the app.
Google user data is not transferred to others except as necessary to provide those features, to comply with applicable law, or as part of a merger or acquisition with the user's consent.
Google user data is not used for serving advertising, and is not sold.
Google user data is not read by humans, except with the user's explicit consent for specific messages, where necessary for security purposes such as investigating abuse, or to comply with applicable law.

What the app asks your phone for

Harkara asks the operating system for these permissions. Each is requested only when you use the feature that needs it, and the app works without any of them.

Permission	Why
Contacts	To offer names and addresses from your phone's address book when you are writing a message. Your contacts are read on the device and are never sent anywhere.
Photos and videos	To attach a picture or video you pick.
Notifications	To tell you when mail arrives.
Fingerprint or face	To unlock the app, if you turn the lock on.
Alarms and start-at-boot	To check for mail on the schedule you set, and to keep doing so after the phone restarts.

Where your information is kept

On your device. Mail, contacts, drafts, attachments you have opened, settings, and the Wallet's receipts and bookings are stored in a database on the phone itself.
Sign-in credentials — passwords, app passwords and OAuth tokens — are held in the operating system's protected store: the Android Keystore or the iOS Keychain.
Nothing is uploaded. There is no cloud backup of your mail in Harkara, and no account to create with us.

How it is protected

Connections to mail servers use TLS.
Credentials are sealed by the operating system's own key store rather than written into the app's database.
JavaScript is disabled wherever a message is displayed, and remote images are off unless you allow them.
The app can be locked with a six-digit passkey held in the device's secure store, together with your fingerprint or face.
No system is perfect, and a device that is lost, rooted or jailbroken is outside what an app can defend.

The Wallet

Harkara's Wallet picks out receipts, bookings and parcel tracking from mail already on your phone. That reading happens entirely on the device. No message is sent anywhere to be parsed, and the results are stored only on the device.

Deleting your information

Removing an account from Harkara deletes that account's stored mail, folders, drafts and credentials from the device. Uninstalling the app removes everything it kept.

Some things deliberately outlive the account they arrived with, so that removing a mailbox does not destroy work you did in the app: files you saved to the Shelf, Wallet entries, contacts and groups you created, and your settings. You can delete each of these in the app — the Wallet has a "Clear the Wallet" action, and saved files and contacts can be removed individually — and uninstalling removes them all.

Mail held by your provider is unaffected by any of this. To remove Harkara's access to a Google account, revoke it at myaccount.google.com/permissions.

Your rights

We do not hold your mail, contacts or settings, so in most cases there will be nothing for us to delete. You may still ask. Write to admin@bighelpers.in and we will tell you what, if anything, we hold about you, correct it or delete it on request, and reply within 30 days. If our answer does not satisfy you, you may complain to the Data Protection Board of India.

Children

Harkara is not directed at children under 13, and we do not knowingly collect information from them — as above, we do not knowingly collect information from anyone.

If something goes wrong

Because no mail or personal data reaches our systems, a breach of our systems could not expose it. If we ever become aware of a security problem in the app that puts your information at risk, we will publish it on this site and notify the relevant authority where the law requires it.

Changes to this policy

If the app's behaviour changes in a way that affects this policy, this page is updated and the date at the top changes with it. The rule that mail is never sent to a server of ours is enforced in the app's code, not merely stated here, and is not something we intend to revisit.

Who we are, and how to reach us

Bighelpers Softwares and Solution Pvt. Ltd
HIG MP Housing Board Colony, Nadhav nagar gate,
Katni, Madhya Pradesh 483501, India
admin@bighelpers.in

Write to that address for anything in this policy, including a request under the Digital Personal Data Protection Act, 2023. It is also the grievance address for the purposes of that Act.