Your data never leaves your device
Abiat is local-first by design. Email and calendar data is cached on your machine, credentials live in your OS keychain, and nothing is routed through Abiat's servers — because we don't have any.
At a glance
Email stays on your Mac
Messages, threads, and calendar events are cached in a local SQLite database on your device. They are never uploaded to or routed through any Abiat server.
Credentials in your OS keychain
OAuth tokens are stored by macOS Keychain — your OS's own encrypted credential store. Abiat never sees or stores your Google password.
No Abiat account required
Sign in with your existing Google account. There is no separate Abiat login, no password to create, and no user database on our end.
Anonymous analytics only
The only data that ever leaves your machine is anonymous usage events — no email content, no personal identifiers, no IP address. You can opt out any time.
Architecture
Built local-first from day one
There is no Abiat cloud. Every piece of data that matters to you is fetched directly from Google and stored on your device.
Local SQLite cache
Abiat maintains a local SQLite database that mirrors your Gmail inbox and Google Calendar. Reads are instant because they never hit a network. Writes go straight to Google, not through us.
macOS Keychain storage
Access and refresh tokens are written directly to macOS Keychain using the OS-level secure credential API. They are encrypted at rest by your hardware and never touch Abiat's infrastructure.
Google OAuth 2.0 only
Authentication is handled entirely by Google's OAuth 2.0 flow. Abiat only ever receives scoped tokens, not passwords. Revoke access at any time from your Google account settings.
Data security
What happens to your data
No server-side storage
Abiat operates no database or object-storage service. There is nowhere for your data to be stored or breached on our end.
No email content transmitted
Email subjects, bodies, attachments, and search queries are never sent outside your device. They are not included in any analytics event.
GDPR compliant
Abiat is based in Sweden and operates under EU law. The only personal data processed is anonymous analytics, handled under legitimate interests and with EU-region servers.
Data deleted on uninstall
Uninstalling Abiat removes the local cache entirely. Your Google data in Gmail and Calendar is unaffected — Abiat never holds a separate copy anywhere.
Encrypted at rest by your OS
macOS encrypts all data on disk via FileVault when enabled. OAuth tokens in Keychain are encrypted with your hardware security module automatically.
TLS for all network traffic
All requests from Abiat to the Gmail and Calendar APIs use Google's HTTPS endpoints. Traffic is encrypted in transit via TLS 1.2 or newer.
Your data is never sold
Abiat does not sell, rent, or share personal data with third parties for advertising or marketing purposes. Ever.
Anonymous analytics only
Usage events sent to Aptabase (EU region) contain no email content, no personal identifiers, and no IP address. Contact us to opt out.
Google-verified OAuth scopes
Abiat requests only the Gmail and Calendar scopes it needs. Access is governed by Google's OAuth consent screen and can be revoked at any time from your Google account.
Download Abiat and see for yourself
Free to download. Local-first. No account required.
Download Abiat