Privacy
Rulebook has no account, no server, and no analytics. It is a client for a mailbox you already own, and it talks only to your mail provider, plus Apple's App Store for the Rulebook Pro purchase.
- No data collected Nothing is collected by the developer. There is nowhere for it to go: Rulebook has no backend.
- No tracking No analytics, no tracking, no advertising identifier, no third-party SDKs of that kind.
- Your rules stay in your mailbox The app edits them in place. It does not keep a copy anywhere else.
- Your mail is not read One permission the app needs would allow reading senders and subjects. Rulebook does not use it for that. See below.
Signed in to a personal Microsoft account or a Microsoft 365 work or school account, Rulebook reads and writes:
- Your mail rules Names, conditions, actions, order, and whether each is enabled. This is the entire point of the app.
- Your folder names So a rule can say “Move to Finance/Invoices” instead of an opaque identifier.
- Your account name and address Shown so you can tell which mailbox you're looking at.
A permission that is broader than the app's use of it
Listing your folders through Microsoft Graph requires a permission that also grants access to message senders, recipients and subjects. Rulebook does not read them, and there is no code in the app that does. But the grant you see on the Microsoft consent screen is wider than what the app actually uses, and you should know that before approving it rather than discover it afterwards. The source is public if you want to check.
Message bodies are never requested at all. Rulebook does not ask for the permission that would allow it.
Sign-in tokens are held in the iOS Keychain on your device, managed by Microsoft's authentication library. They are not transmitted to the developer, because there is no developer-controlled server to transmit them to.
Your rules are held in memory only while the app is open; nothing about them is written to the device. Deleting the app removes the tokens too.
Nobody. Rulebook makes network requests to Microsoft, on your behalf, using your own credentials. That traffic is governed by Microsoft's privacy terms and, for a work or school account, by your organisation's policies, both of which apply exactly as they already do to your mailbox.
The only other destination is Apple's App Store, when you buy or restore Rulebook Pro.
Rulebook is not directed at children. It requires an existing mail account to do anything at all.
Sign out from Manage accounts in the app, which deletes the token from your phone. To revoke the grant itself, use account.live.com/consent/Manage for a personal Microsoft account, or myapps.microsoft.com for a work or school account.
If this policy changes, the updated version appears on this page and the date below changes with it. Questions are welcome through the support page, or by email to jeff@steinbok.net.
Last updated 11 October 2026.