Tiho Mail

Alan Matviienko

About this app

Tiho is a mail app for people with their own domain — a mailbox at a company, at a provider, or on your own server. It connects to what you already have. There is nothing to migrate.

RESPECTS YOUR ATTENTION
No badges you did not ask for, no marketing inside the app, no feed. A list of messages, in the order they arrived, and nothing trying to keep you in it.

BLOCKS TRACKING, AND SAYS WHERE IT COSTS YOU
Remote images are off by default: a tracking pixel tells the sender you opened the message, and no rule of thumb reliably tells one from a logo. Sender logos come from the domain’s DNS — the same picture for every recipient, so showing one gives nothing away.

NOTIFICATIONS EXPLAIN THEMSELVES BEFORE THEY ASK
To tell you the moment mail arrives, our server holds a connection to your mailbox, and for that it stores access to it, encrypted. From a message it reads the sender and the subject, and the first lines if you allowed them — a notification has to show something — and encrypts all of it with a key that belongs to your device: nobody can read it on the way, not even Google. What you did not allow is never sent to you and never stored; the first lines it does not even ask your mailbox for. Nothing from your letters is kept. All of this is on its own screen, before the system asks anything, and disconnecting the mailbox wipes it.

CONVERSATIONS, NOT LISTS OF LINKS
Replies read as one continuous conversation. Your own answer appears in it the moment you send it, not after the server agrees.

MEETING INVITATIONS LOOK LIKE MEETINGS
Not “invite.ics, 4 KB” — the title, the time, the place, the participants, and buttons to answer. Accepted meetings can be added to your calendar.

NEWSLETTERS KNOW THEIR PLACE
They are recognised by the standard header senders are required to add, kept in their own view, and unsubscribed in one tap where the sender supports it.

BULK MAIL DONE PROPERLY
Campaigns go out through a sending service with your own key, never from your mailbox: a personal mailbox hits its provider’s limit within the first hundred messages, and the domain lands in spam afterwards. Lists live on your device, an unsubscribe link is added automatically, and sending without one is not allowed.

WORKS WITH
Any mailbox that speaks IMAP and SMTP — your own domain, a company mailbox, Fastmail, Zoho, iCloud, cPanel hosting. Microsoft 365 and Outlook.com sign in through Microsoft itself, because Microsoft turned off password sign-in for mail.

Gmail is not supported and will not be. Google requires an annual security audit of anyone whose server touches Gmail data, and the price of that audit would end up on your bill.

What’s new

First release on Google Play: a quiet mail client for your own mailbox — conversations, meeting invitations, one-tap unsubscribe, server-side rules and an away message.