Tiho Mail

Notifications say what the server sees before they ask permission. Images blocked by default. Conversations, invitations, one-tap unsubscribe.

Tiho is a mail app for people with their own domain — a mailbox at a company, at a provider, or on your own server. It connects to what you already have. There is nothing to migrate.

RESPECTS YOUR ATTENTION No badges you did not ask for, no marketing inside the app, no feed. A list of messages, in the order they arrived, and nothing trying to keep you in it.

BLOCKS TRACKING, AND SAYS WHERE IT COSTS YOU Remote images are off by default: a tracking pixel tells the sender you opened the message, and no rule of thumb reliably tells one from a logo. Sender logos come from the domain’s DNS — the same picture for every recipient, so showing one gives nothing away.

NOTIFICATIONS EXPLAIN THEMSELVES BEFORE THEY ASK To tell you the moment mail arrives, our server holds a connection to your mailbox, and for that it stores access to it, encrypted. From a message it reads only the sender and the subject — a notification has to show something — and encrypts them with a key that belongs to your device: nobody can read them on the way, not even Apple. The body of the message it never reads and nothing is kept. All of this is on its own screen, before the system asks anything, and disconnecting the mailbox wipes it.

CONVERSATIONS, NOT LISTS OF LINKS Replies read as one continuous conversation. Your own answer appears in it the moment you send it, not after the server agrees.

MEETING INVITATIONS LOOK LIKE MEETINGS Not “invite.ics, 4 KB” — the title, the time, the place, the participants, and buttons to answer. Accepted meetings can be added to your calendar.

NEWSLETTERS KNOW THEIR PLACE They are recognised by the standard header senders are required to add, kept in their own view, and unsubscribed in one tap where the sender supports it.

BULK MAIL DONE PROPERLY Campaigns go out through a sending service with your own key, never from your mailbox: a personal mailbox hits its provider’s limit within the first hundred messages, and the domain lands in spam afterwards. Lists live on your device, an unsubscribe link is added automatically, and sending without one is not allowed.

WORKS WITH Any mailbox that speaks IMAP and SMTP — your own domain, a company mailbox, Fastmail, Zoho, iCloud, cPanel hosting. Microsoft 365 and Outlook.com sign in through Microsoft itself, because Microsoft turned off password sign-in for mail.

Gmail is not supported and will not be. Google requires an annual security audit of anyone whose server touches Gmail data, and the price of that audit would end up on your bill.