How Fidune works: what we claim, and how to check it
What we claim, stated so you can check it
- No BeeLabs server is in the path of your content or your sign-in tokens. The app talks directly to Google or Microsoft over TLS. BeeLabs runs no backend that receives mail, prompts, AI output or tokens.
- Your mail is processed on your iPhone. Messages and events are stored on the phone in an encrypted database, and the sign-in tokens are kept in the iPhone Keychain, on that device only.
- AI runs on your iPhone by default. Apple Private Cloud Compute is used only for the features you turn on, one feature at a time, after you consent. It then receives only the text selected for that one request.
- BeeLabs receives no content and no tokens. The only data BeeLabs can receive from the app is an anonymous statistics export that a beta tester previews and chooses to share.
- Every message is approved by you. Fidune shows the exact message (accounts, every recipient, subject, full body, attachments) and sends only what you approved. Any change needs a new approval.
The servers the app contacts
In this version, the app contacts only these hosts:
| Host | Operator | Why |
|---|---|---|
accounts.google.com | Google sign-in page, opened in the system browser | |
oauth2.googleapis.com | Exchange, refresh and revoke Google sign-in tokens | |
gmail.googleapis.com, www.googleapis.com | Read your Gmail; send a message you approved | |
login.microsoftonline.com | Microsoft | Microsoft sign-in page and sign-in tokens |
graph.microsoft.com | Microsoft | Read your Outlook mail; send a message you approved |
| Apple Private Cloud Compute | Apple | Only for features you turn on |
You can compare this list with the iOS App Privacy Report (Settings > Privacy & Security > App Privacy Report), which lists the domains each app contacts. Inside Fidune, Settings > Privacy > Activity lists every Private Cloud Compute request and every action that was executed.
What we don't claim
Fidune keeps what it learns about you away from anyone new. It does not make your data invisible to everyone:
- Your mail provider already holds your mail. Google or Microsoft keeps your mailbox as it does today. It sees the app read your mail and send the messages you approve, and learns nothing new from Fidune.
- Apple Private Cloud Compute processes the requests you turn on. For a feature you turn on, the text selected for that request is processed on Apple's servers, not on your iPhone.
- Outside AI is used only if you connect it. If you connect an outside AI service, what you send it leaves your iPhone and Apple's systems. The app labels that route "outside zero-knowledge".