Postfach – Private Mail
We run no servers, no AI
Free · In‑App Purchases
Postfach is mail software, not a mail service. It runs on your Mac, iPhone, and iPad, and it talks to your mail server and to nothing else.
We run no servers, so there is nothing of yours on one.
A call from our hosting provider started it. They asked whether one of our important addresses had anything to do with a big cloud company — it didn't. It turned out the mail app we were using was routing through that company to deliver push notifications. We had tried nearly every mail app by then and were never quite happy, so we built our own.
Here is why that call mattered. To push a notification for an ordinary IMAP account, an app has to keep your password — or a token that opens the same door — on its own server, and watch your mailbox from there. Postfach never does this. Your password stays in your Keychain, and new mail is announced by your own device once it has fetched it: on the Mac within seconds while the app is running, on the iPhone whenever iOS grants a check in the background. Instant push is the one thing we gave up, and that is why.
WHAT IT DOES
- Any IMAP account: Zimbra, Gmail, and the rest. Zimbra servers are found from the address alone.
- Write, reply, forward, and send, with attachments.
- All Inboxes: one list over every account, newest first, with each message acting on its own account.
- Conversations, with replies from every folder gathered under the message you are looking at.
- Every message kept on your device in full, so reading works offline and search finds words anywhere in years of mail in a fraction of a second.
- Templates with placeholders for the replies you write again and again.
- Folders: create, rename, move, and delete them, on the server.
- Swipe to delete, flag, mark as junk, or archive.
- New-mail notifications from your own device, once it has fetched, per account, and the unread count on the icon.
- HTML mail rendered with scripts off and remote images blocked until you ask for them.
- Light and dark appearance. English, German, French, Italian, Spanish, and Japanese.
WHAT IT DOES NOT DO
No analytics, no crash reporting, no advertising identifier, nothing measured and sent anywhere. No AI: no summaries, no smart replies, no sorted inbox, and no model of ours or anyone else's sees a word of your mail. No account with us, because there is nothing to have an account for. That is why the privacy label reads "Data Not Collected", and why there is no setting to turn any of it off: none of it is there.
PRICING
Every feature is free for 60 days. After that, sending and receiving mail need a single purchase, Postfach Pro — one price for your Mac, iPhone, and iPad, no subscription. Mail already on your device stays readable and searchable whether you buy or not.
more Alerts can be Time Sensitive. An alert for a folder has a new switch, Time Sensitive Notifications: with it on, the alert's notifications are shown even while a Focus is on, if that Focus allows Time Sensitive notifications. It is off until you turn it on, alert by alert in Settings › Alerts, and notifications about new mail stay as they are.
Plus smaller improvements and fixes.
1.6.2 18h ago
Smart folders: a search you keep. A smart folder is a list in the sidebar of the messages that meet its conditions, from every account: words, the sender, the account and the folder, when a message arrived, attachments, unread, flagged. After a search, Save as Smart Folder… keeps it, and Settings › Smart Folders makes and changes them. Nothing is moved, on your device or on your mail server.
Settings › Privacy is new. It counts the trackers Postfach blocked in the mail you opened, has a switch for each known service, and takes domains of your own to block. Whether an account loads remote images is set there too, no longer in Appearance.
Postfach asks before it sends a message without a subject or without text.
Search finds words in Japanese and Chinese mail, which is written without spaces.
Settings › Statistics is now called Storage.
Postfach is now available in Spanish and Japanese.
Plus smaller improvements and fixes.
1.6.1 3d ago
Find in a message: Find in Message, in the message's menu, finds text in the open message and in every message of its conversation. With a keyboard, ⌘F, ⌘G, and ⌘E work as on the Mac.
Search starts where you are: a search now looks in the folder on screen first, in Junk and in the Archive too. All Mailboxes is one tap away, under the search field.
Tracking is blocked: Postfach takes the tracking pixels of known services, and invisible pictures, out of a message before it shows it, also when you let the message load its remote images. The message's header says how many it blocked.
Long conversations from mailing lists read better: each reply stands under the message it answers, Next Unread in Conversation takes you to the next unread message, and a folded message shows the beginning of what it says, not of what it quotes.
Junk rules for all your devices: Send Junk Rules by Email… in Settings › Junk Rules sends your rules and your trusted senders to your other devices, so that all of them treat the same mail the same way. And when you save a rule, you choose which of the matching messages in your Inbox move to Junk.
Save or share all of a message's attachments at once: one by one with Save All…, or as a single file with Save All as ZIP….
A reply now marks every line of the message it quotes with “>”, so what you answer between its paragraphs stands apart from the original.
Mark as Junk can suggest a junk rule made from the message. This is now on for new installs; if you already use Postfach, the switch is in Settings › Junk Rules.
Postfach is now available in Italian.
Plus fixes for security and reliability.
1.6.0 4d ago
Save space on your device: Postfach can now keep the text of your messages and leave their attachments and pictures on the mail server. Choose for each account what is kept, in Settings › Statistics, or offload a single message by hand. An attachment left on the server shows a cloud and comes back with a click or a tap.
Forward can now send a message's attachments along; it asks first.
Making a junk rule from a message is quicker: the subject is already ticked, and only the words that are rare in your mail are offered.
Plus fixes for security and reliability.
1.5.0 Oct 3
Notifications about new mail no longer appear while Postfach is the app in front, and they leave Notification Center once you have read the mail, here or on another device, or moved or deleted it. The notification about many messages at once now opens their inbox.
On the Mac, while no message is open, the reading pane names the account whose mail you are looking at, and in All Inboxes how many accounts it shows. Text you select in a message you are writing is easy to read again in dark mode.
Security and reliability fixes throughout the app.
1.4.3 Oct 1
You can now rename a folder you made: choose Rename Folder… from its menu in the mailboxes (a right-click on the Mac, touch and hold on iOS), or from the Folder menu on the Mac. The folder keeps its messages and subfolders and is renamed on your mail server too.
A folder closed in the mailboxes stays closed when it is moved or renamed.
On the iPhone, Get New Mail sits at the foot of the mailboxes, beside Settings and Contacts. Its arrows turn while mail is being checked, and a tap shows what is being checked and when mail was last checked, with Get New Mail to check now. The foot of the mailboxes no longer jumps as the time since the last check goes by.
1.4.2 Sep 28
You can now rename a folder you made: choose Rename Folder… from its menu in the mailboxes (a right-click on the Mac, touch and hold on iOS), or from the Folder menu on the Mac. The folder keeps its messages and subfolders and is renamed on your mail server too.
A folder closed in the mailboxes stays closed when it is moved or renamed.
On the iPhone, Get New Mail sits at the foot of the mailboxes, beside Settings and Contacts. Its arrows turn while mail is being checked, and a tap shows what is being checked and when mail was last checked, with Get New Mail to check now. The foot of the mailboxes no longer jumps as the time since the last check goes by.
1.4.1 Sep 27
Addresses in a new message are tokens now. Type an address and a comma, or pick a suggestion, and it becomes a token you can drag from To into Cc or Bcc and back; a token's menu (a right-click on the Mac, a tap on iOS) moves, edits, copies, or removes it. A click on a token shows its address in place of the name. Over an open message, To and Cc start with the same TO and CC capsule the list uses.
Make a Junk Rule… now shows what a rule matches while you tick its words: a line above the form counts the mail you kept that it would catch, and the matches in Junk and Trash. On the Mac and the iPad a panel beside the form lists them, each message with the words of the rule it holds, so the word to untick is plain.
Accessibility: at the largest text sizes, texts wrap where they were cut off; with Reduce Motion on, nothing slides or springs; a search's matches are underlined and a drop target outlined, so nothing is told by colour alone; and VoiceOver says whether an account's folders are shown.
In a Flagged mailbox, Unflag and every other action now reach the flagged messages even when a newer reply stands for the conversation.
1.4.0 Sep 25
Group your accounts in the sidebar with dividers: a plain line between accounts, or a heading such as "Work" over the accounts under it. Let a heading hide its accounts, and a click or a tap tucks them away, with their unread count beside it, and brings them back as you left them. Add one in Settings › Accounts or from an account's menu, and drag it into place like an account. A settings export takes your groups to your other devices.
On the Mac, the suggestions under the search field now close with Escape or Return and keep your search; a second Escape clears it. Their first row, Everything, looks in the subject, the people, the text, and attachment names at once, as typing alone does.
On the Mac, ⌘A after clicking a mailbox selects every message in it, and the accounts in the sidebar sit closer together.
Your mail takes much less space on your device: the search index no longer keeps a second copy of every message's text. The first launch after the update tidies the local store once, which can take a few seconds for a large mailbox. Downloaded messages are no longer copied into iCloud Backup or Time Machine; they are on your mail server and come from there again. Your templates, settings, and unsent mail stay in the backup.
The Flagged mailbox and long lists open faster, the first download of a large mailbox no longer slows down as it grows, and new mail is checked against many junk rules in a fraction of the time.
In Junk, senders are shown by their address, which gives away a made-up name like "Your Bank". Make a Junk Rule… offers the message's whole subject as a rule of its own, and asks before saving a rule that would also catch mail you kept.
On the Mac, Get new mail stays in sight in a narrow sidebar, Colorful Icons colour the toolbar's buttons too, and Settings › Alerts can show a startled cat in the Dock while an alert has gone off.
Messages no longer lose their downloaded text, or drop out of search, when the server sends their headers again. A folder the server renumbers no longer announces old mail as new if the refresh is interrupted. A new account is added at the end of the list. And if Postfach cannot open its data, it offers to start over and keeps the old data aside.
1.3.2 Sep 24
All Inboxes now opens onto All Drafts, All Sent, All Flagged, All Archives, All Junk, and All Trash, each one list over that folder of every account. Seeing what the filters caught across your accounts takes one look instead of one per account. Each row names its account, the choice above the list narrows it to one, and whatever you do to a message happens in its own account. Mark All Messages as Read, Empty Trash, and Delete Junk Mail work on every account at once, after one question that says how many messages in how many accounts. If you'd rather not have them, turn off Mailboxes over all accounts in Settings › Appearance.
Junk rules catch the junk your mail server lets through. On a message in Junk, choose Make a Junk Rule…: Postfach proposes the message's rarest words, rare as measured in your own mail, and shows what the rule would have caught before you save it. New mail that matches goes straight to Junk, without a notification. Mail from people you have written to, from your own accounts, or marked Not Junk is never moved. A message a rule moved says which one, and Not Junk on it offers to change the rule. The rules are in Settings › Junk Rules, where a switch can offer a rule each time you mark a message as junk.
Folder alerts tell you when a folder fills up, such as one your server's filters sort mail into: when it holds more unread messages than a number you choose, or when more than that many arrive within the minutes you set, once or again every so many minutes while it lasts. Choose Add Alert… in a folder's menu. While an alert stands, the folder's count turns red in the sidebar and an alarm follows the account's name. Alerts are checked whenever the account checks for mail, and listed in Settings › Alerts.
Remote images can be remembered for a sender: with Load remote images on a message, the sender's later messages load theirs too, and Stop on one of them asks again. Only for a sender your mail server confirmed, never in Junk. Turn it off for an account with Remember senders in Settings › Appearance.
A help text in Settings is folded to one line, with More at its end to read the rest.
The switch for Eddie the cat has moved to Settings › Appearance › All Accounts (Mac and iPad).
Replying to or forwarding a very long message is quick again: the quote holds the first megabyte of its text and says where it was cut, and long runs of empty lines are folded.
Messages that carry forwarded messages inside forwarded messages open with far less memory, and so does a message with a very large style sheet or a very long link.
Pressing and holding a link in a message, or force clicking it on the Mac, no longer opens a preview of the page, which loaded it before you chose to.
Make a Junk Rule… opens at once on any message, and stops working in the background when you close it.
If your mail server turns Postfach away for having too many connections open, new mail still arrives: Postfach tries again later instead of waiting for you to sign in again.
Emptying a large Trash is kept even if you quit Postfach right after. A draft saved just as the connection drops is no longer saved twice. An Outlook.com or Hotmail account no longer shows server settings, which Microsoft decides.
And many smaller fixes that keep your mail and your sign-ins safe from messages and servers that misbehave.
1.3.1 Sep 23
Sync Activity now says what is being downloaded. Open it while Postfach is at work, and each account shows a line for checking mail and a line for the download, with the folders it is downloading from and how far it has got. Until now the download could drop out of it while mail was being checked.
Emptying the Trash, or moving or deleting tens of thousands of messages at once, no longer holds up the app: the work goes on in the background. Removing a large account needs far less memory.
A copy for Sent or a draft that the server would not take, when the mailbox is full, say, is now listed in the Outbox with Save Again. Both were kept before, but out of sight.
A move, a deletion, or a flag change made just as the connection drops or the network changes is kept and sent once the connection is back. Before, it could be quietly undone.
Messages read or flagged on another device now show so in every folder, also on servers that keep no record of changes for some folders.
1.2.3 Sep 22
All Inboxes says which account each message came to on a line of its own above the sender, with the date at its end, so a list of many accounts reads at a glance.
Each account chooses how it is named there, in Settings › Appearance › Names: by name, by address, or by both. The same section now holds what "Show sender addresses instead of names" did for all accounts at once, per account and for its notifications too.
A section's help text in Settings is folded to two lines, with More to read the rest. Accounts comes first in Settings.
On an account's page, Save waits until something differs from what is stored, and the page says "Unsaved changes" while it does.
1.2.2 Sep 20
An account that cannot sync now shows a warning sign beside its name in the sidebar and in Settings › Accounts. Tap it to see why, with Try Again, Account Settings, and Show in Log.
An error at the foot of the screen opens to its whole text with a tap, and Show in Log opens the log on that account's errors.
Insert Template lists your template folders straight away when every template is in a folder. It showed nothing until you searched.
The Junk rules for emoji and alphabets never move mail sent from one of your own accounts in Postfach, so templates you send from one device to another arrive in the inbox.
Swiping a message in Junk shows Not Junk in green, so it no longer looks like Mark as Junk.
1.2.1 Sep 20
Remote images are each account's choice now, in Settings › Appearance: When I Ask or Always. One mailbox can load them for its newsletters while another keeps them blocked. In Junk they always wait until you ask, since a loaded image tells the sender your address is read. If you had them on for all mail, every account starts with Always.
When Microsoft doesn't yet let an Outlook.com or Hotmail account send from mail apps, Postfach says so in plain words, keeps the message in the Outbox, and links to a help page on what to do. Adding such an account links to how to switch IMAP on at outlook.com.
The alphabets in Settings › Junk are listed in alphabetical order.
1.2.0 Sep 18
The Archive can be listed by year, or by year and month, each with its message count. A search in All Mailboxes leaves the Archive out unless you include it, and the words you searched for are marked in the results.
Sent and Drafts show who each message went to. A new Appearance pane lets each account choose how the sidebar, the message list, and the open message name it and the people in your mail.
A new Junk pane holds the emoji rule and a new one for subjects written in an alphabet you tick. Trash and Junk can be emptied in one go, and Postfach asks before deleting more than three messages at once.
Export your settings, accounts, and templates to one file and import them on another device. The file holds no passwords.
Gmail addresses get Google's servers filled in, and a paused account is greyed out and left out of All Inboxes and the unread counts.
1.1.1 Sep 18
Alerts can be Time Sensitive. An alert for a folder has a new switch, Time Sensitive Notifications: with it on, the alert's notifications are shown even while a Focus is on, if that Focus allows Time Sensitive notifications. It is off until you turn it on, alert by alert in Settings › Alerts, and notifications about new mail stay as they are.
Plus smaller improvements and fixes.
more Version 1.6.2 18h ago
Data Not Collected The developer does not collect any data from this app.