Privacy Policy

Last updated October 10, 2026 · DeskMate by Lapis Studios

DeskMate is a desktop app that runs on your Windows PC. It has no user accounts and no servers that receive your data. Everything it stores stays on your computer.

What stays on your PC

Password vault: encrypted with your master password and stored only on your PC. Lapis Studios can't read it or recover it.
Settings and plugin data: stored in your Windows user profile.
Vault backups: saved only to the location you choose, encrypted with your master password and recovery key.

Gmail plugin and Google user data

If you install the Gmail plugin and sign in with Google, DeskMate asks Google for read-only access to your Gmail (the gmail.readonly scope). With it, DeskMate on your PC reads the senders, subjects, short previews and, for recent sign-in emails, the message text, so it can show new emails and find verification codes.

Your email is read directly from Google to your PC. It is never sent to Lapis Studios or anyone else.
DeskMate doesn't store your emails. It keeps a short-lived list in memory and a list of message IDs it has already notified you about.
Your Google sign-in is stored on your PC, encrypted with your Windows account. DeskMate never sees your Google password.
DeskMate can't send, delete or change any email.
You can sign out at any time in the plugin, which revokes DeskMate's access. You can also remove access at myaccount.google.com/permissions.

DeskMate's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data isn't used for advertising, isn't sold, isn't transferred to others, and isn't used to train AI models.

Network connections

DeskMate connects to the internet only for features you use: the plugin store at deskmate.lapistudios.com, internet radio, and the services your plugins are allowed to reach (each plugin's websites are listed when you install it).

Contact

Questions: lapistudios.com