Skip to content
Letos is in beta.What that means
Switch to Czech: CSGet an invite

Guides

Privacy under control

Where your data flows, how to turn on two-factor authentication and passkeys, and where to find sending consents.

~7 min

Letos keeps your data with you and asks before it sends anything out. This guide shows how to check and secure it.

1. Know where data flows

  • Mail and calendar go directly between your device and the provider (Gmail, your IMAP/SMTP server). Our server doesn’t see them.
  • Sync between devices goes through our sync server, but end-to-end encrypted.
  • AI either runs on the device or goes directly to the provider you choose and agree to.
  • Agents (MCP) connect only locally on your computer.

The web version is the exception: there the account’s downloaded data is stored on our server, each account in its own database.

2. Check your sending consents

Open Settings → Privacy (on the iPhone at the bottom of Settings). You’ll see every place data can leave, in three groups — content to a third party, network requests, the Letos server — with the state Allowed / Denied / Undecided / Waiting for a decision.

  • Allowing always opens the consent, which spells out where, what exactly is sent and why.
  • Revoking applies at once. For AI you can also tick to delete the API key.

3. Turn on two-factor authentication

Your account is protected by a password; a second step protects it better. Open Settings → Letos account → Turn on two-factor authentication:

  1. Enter your account password.
  2. Scan the QR code in an authenticator app (or Copy key and enter it by hand).
  3. Enter the Code from the app and confirm with Turn on.
  4. Save the Backup codes (Copy or Save to a file) — each works only once and they’re shown only now.

4. Add a passkey (optional)

Settings → Letos account → Add a passkey. Adding happens in your browser: you name the key and confirm it with a fingerprint, a face or a PIN. At sign-in it’s then used instead of typing a code.

The second steps protect signing in to the account, not the encryption of your data. The data is still derived only from your password and the recovery code — keep both.

5. Know how to wipe data

  • Signing out deletes from that device the tasks, mail, calendars, attachments, connected accounts and their passwords, and AI API keys. Nothing is deleted on the server or at your mail provider.
  • Deleting your account deletes the account, devices, encrypted data and attachments on the server, and signs the device out.

The app has no telemetry and no automatic crash reporting. The technical log letos.log stays on the device and is never sent anywhere on its own.

What next

Last updated:

← Back to the docs