BlindSpot looks for the promises you make — in your email, a forwarded text, a photo, or something you type in — so it can remind you before they slip. Here's exactly what that means — no jargon, nothing glossed over.
| Read your email to find commitments in it | Yes |
| Read a photo, forwarded text, or typed note you send it | Yes |
| Remind you about things you promised | Yes |
| Send email or texts pretending to be you | No |
| Edit, delete, or archive your email | No |
| Keep a photo after it's read | No |
| Sell or share your information | No |
This isn't just a policy we promise to follow — your email provider's own permission system makes send/edit/delete technically impossible for us. We can only ever read.
🔒 In transit: everything moving between your email provider, BlindSpot, and the services we use runs over secure, encrypted connections (HTTPS/TLS) — every time, no exceptions.
🔐 In storage: what BlindSpot stores is encrypted on disk by default, and your account's data is walled off from every other account by database-level access rules, not just app-level checks — the strongest practical protection we know how to build, though no single layer is a substitute for us staying careful about how it's configured.
🔏 An extra layer, on top of the above: your mailbox connection itself, and the short excerpts BlindSpot stores, each get their own independent layer of encryption — separate keys, on top of the disk-level protection above. This is live today, not a future promise.
🔌 Disconnect a single mailbox — remove one connected inbox without touching the rest of your account. BlindSpot stops reading it right away; commitments already found stay in your list.
🗑️ Delete your account — one confirmation, and everything is erased: every commitment, every connection, your login. Immediate and permanent, no undo.
Both live in Settings, no support ticket required.
We only look at mail well enough to check whether it contains a commitment. We don't store your full inbox, and the vast majority of what we glance at is never saved anywhere — only the short summary of an actual promise gets kept.
No. The read-only permission your provider grants us makes this technically impossible, not just against our policy — there's no button in our code that could send mail even if we wanted to.
Yes — from Settings, next to that mailbox. BlindSpot stops reading it right away; you can reconnect any time. Commitments it already found stay in your list, since disconnecting only stops future reading, it doesn't erase past results.
No. A photo is read once, for the text and information in it, then discarded — it's never saved to storage. Only the short summary and reference excerpt that come out of that reading are kept, the same as with email.
It arrives through Twilio (the carrier for your dedicated BlindSpot number) and is processed the same way as flagged email — briefly read to identify the commitment, then handled like any other capture. It's not broadcast anywhere else.
Every commitment, every mailbox connection, and your login are removed in one step, automatically — no one on our side has to act on it by hand. This is immediate and permanent, so if you're not sure, don't confirm yet.