AI that guards
your inbox.
MailGuard AI scans emails locally on your device using an ONNX model — no data leaves your phone. Detect phishing, spoofing, and malicious links before you ever click.
// Features
What it does.
On-Device AI
Local ONNX inference scans every message on your phone. Zero cloud processing means your emails never leave the device.
Gmail Integration
Secure OAuth 2.0 connection to your Gmail inbox. One-tap sign-in with granular permission scopes.
Phishing Detection
Identifies social-engineering attempts, suspicious links, and spoofed sender addresses in real time.
// Privacy
Your data never leaves your phone.
MailGuard AI is built on a single principle: your inbox is yours alone. Every analysis happens locally. Nothing is uploaded, logged, or shared.
100% Local Inference
The ONNX model runs entirely on your device CPU. No remote API calls, no cloud model, no network dependency for threat detection.
Zero Data Collection
The app does not store your emails, does not log scan results, and does not transmit any metadata to external servers. There is no analytics SDK, no tracking, and no telemetry.
Transparent & Open
The entire source code is open on GitHub. You can verify exactly what the model does, how the app handles your Gmail token, and where every byte of data goes — which is nowhere.
// How it works
When you connect your Gmail account, MailGuard AI requests a read-only OAuth token with the narrowest possible scope. This token lives only in secure device storage and is used solely to fetch message headers and content into local memory.
The ONNX model — a lightweight neural network optimized for mobile — then processes each email directly on your phone's processor. It scores the message for phishing risk, flags suspicious URLs, and detects spoofed sender patterns. All of this happens in milliseconds, entirely offline.
Once the scan completes, the raw email content is discarded from memory. The app never writes emails to disk, never caches them in a database, and never forwards them to any server. Your OAuth token is the only persistent credential, and you can revoke it from your Google Account settings at any time.
// Stack
How it's built.
Client
Flutter & Dart
A single codebase for Android with reactive UI, animated splash screens, and deep OAuth flows.
AI Engine
ONNX Runtime
A lightweight neural network runs directly on-device via onnxruntime_v2. No network latency, no data leakage.
Services
Gmail API + OAuth 2.0
Secure Google Sign-In with restricted scopes. Fetches message metadata and content for local analysis only.
// Download
Try it out.
Built for Android. Free, open source, and privacy-first — your emails stay on your device.