The fastest mail on your Mac. And the most private.
A unified inbox for Gmail and Google Workspace. Every read comes from a database on your device — 16 ms from keystroke to repaint, and no Korvo server holding a copy of your mail.
16 ms
Keystroke to repaint
50 ms
Open a thread
100 ms
Search 50,000 messages
under 1 s
Cold start to interactive
p95 targets, measured rather than aspirational, enforced by a CI gate that fails the build on a regression. First launch needs the network; every launch after that works offline.
Guarantee
It cannot delete your mail.
Korvo Mail requests exactly one Gmail permission, gmail.modify, and never https://mail.google.com/, the full-access scope. Permanent deletion is unreachable — not promised, absent. Trash moves a conversation to Gmail's Trash, where you can restore it for 30 days.
Unified inbox
Up to nine accounts, one list.
One query, not an N-way merge
Every account writes to one local database. The list is a single indexed query.
No cross-account threading
Two accounts on one thread stay two threads, enforced by the data model.
Reply-from is never guessed
Replies default to the account that received the message, and the address is shown.
Keyboard
Bindings you already know.
Superhuman-compatible, so muscle memory transfers on the first day.
- J / K
- next, previous
- ↵
- open conversation
- E
- mark done (archive)
- U
- read / unread
- S
- star
- #
- trash (never permanent)
- ⌘K
- commands
- ⌘P
- jump + search
- /
- scoped search
- 1–9 / 0
- switch account, unified
Privacy
Four things leave your device. This is the whole list.
Token exchange and refresh.
Sync and mutations, sent from your device.
Authentication only. No mail data, ever.
Only after you tap load images, and only to the sender’s host.
Exhaustive, not illustrative. No analytics, no crash reporting, no telemetry, no AI service call. There is no Korvo mail server, so there is no Korvo copy of your mail.
Your mail is encrypted at rest by the operating system — FileVault on macOS, Data Protection on iOS — and the database is excluded from cloud backup. The local message database is not separately encrypted by the application: malware running as your user could read a second key as easily as the data, a stolen locked device is already covered, and the layer would cost 15–30% of the search budget. Tokens stay in the Keychain. We would rather write that down than let you infer a protection the product does not have.
Price
Free. No trial, no quota, no expiry.
Reconnect every 7 days
Google expires refresh tokens for applications still in verification. Your mail stays on your device in the meantime.
Capped at 100 users
Until verification completes. Both limits are Google's rather than ours, and both end when it does.
Gmail and Google Workspace accounts only.
Korvo Mail has its own privacy policy and terms, written for this application and separate from the ones covering the Korvo desktop app.