Questions? We're here to help.

Blockjay connects to your existing mailbox over IMAP or POP3, or with a one-tap Google or Microsoft sign-in, and filters in the background. There's no new inbox, no migration, and no change to your address — it layers on top of the email you already use.

No. Blockjay connects to the mailbox you already have over IMAP, POP3, or Google/Microsoft sign-in. No new inbox, no migration, no forwarding.

New mailboxes start in monitor mode: Blockjay classifies every message but moves nothing, so you can see exactly what it would catch. When you're convinced, you flip to enforce mode and it starts moving spam out of your inbox into a private quarantine. Either way, nothing is ever deleted.

Gmail, Microsoft 365 and Outlook/Hotmail/Live, iCloud/Apple Mail, Fastmail, Yahoo, and any standard IMAP or POP3 mailbox. Gmail and Microsoft can connect with a single sign-in; other providers use an app password over IMAP.

Most mail is decided immediately by sender authentication, reputation, and rules. The filter also keeps a Bayesian model trained only on your corrections, so a week or two of light correcting settles it into a quiet, accurate rhythm that fits how you use email.

Your whole mailbox is never sent to AI. Only the small, genuinely uncertain band is escalated — to our own self-hosted Blockjay model, with Anthropic's models as a fallback — and only the minimum needed to classify it: sender, headers, and a short excerpt, under a zero-retention, no-training arrangement. You can turn AI escalation off entirely.

Yes. Decline the AI-escalation consent in your account and Blockjay falls back to Rspamd-only classification for your mail — no message is ever sent to an AI model.

No, and we won't pretend otherwise — a cloud filter has to read your mail to classify it. Everything is encrypted at rest, no employee has a product path to read your mail, and we're explicit about the trade-offs on our security page.

There is no admin endpoint that returns message content, by design — administrators see operational data only, such as account health and counts. Each user's mail is encrypted under their own key, so one user's key cannot decrypt another's data even at the storage layer.

Blockjay is self-hosted in the United States. A short list of sub-processors — Anthropic (fallback AI), Stripe (billing), and Cloudflare (network and email) — helps us run the service; see the privacy policy and sub-processors page for details.

No. Blockjay never deletes your good mail — it sorts it. Anything it catches is held in a private quarantine, saved in full, and is one tap from being restored. You decide what to delete.

Valid mail is never automatically deleted — it stays until you delete it. Quarantined spam is automatically cleared 60 days after it was caught, along with the copy we stored, and we email you about a week before anything is cleared so you can rescue a false positive. You can always restore or delete a message sooner.

Open the message and tap “Not spam — restore” or “Mark as spam.” Blockjay moves it, updates your allow/block list, and teaches your personal filter — so the same mistake is less likely next time. Every correction is a single reversible tap, with undo.

Yes. Quarantined mail is rendered defensively — remote images are off by default, links are defanged so a tap can't fire them, scripts are stripped, and the body is shown in a sandboxed frame. You can review junk without risk.

Everything lives in one calm app, split into Spam, Valid, and Unsure. Each message carries a score and a one-line reason, so you can see why it landed where it did — no mailbox “Junk” folder to dig through.

Pricing is per mailbox, with annual billing saving about 20%. During Early Access the prices shown are illustrative and will be finalised before general launch — see the pricing page for the current tiers.

Early Access starts with no card required. New accounts begin in monitor mode so you can watch the filter work — classifying everything, moving nothing — before you let it act or subscribe.

Blockjay meters AI usage, not total email, because most mail is decided for free by rules and the Rspamd engine — only the genuinely uncertain band ever reaches an AI model. Allowances are pooled across your mailboxes, and you can set a cap so a bill never surprises you.

Yes. You can manage or cancel your subscription from your account at any time, and you can stop using Blockjay and delete your data whenever you like.

Protect sign-in with two-step verification — an authenticator app (TOTP) plus one-time backup codes — from your account settings. Passwordless Google, Microsoft, and Apple sign-in are also supported.

You can export a portable archive of your personal data, and erase it, from your account or by contacting us. Erasure cascade-deletes your records, purges stored message bodies, and destroys your per-user encryption key so any residual ciphertext is unrecoverable (crypto-shredding).

Remove it from your account settings. Blockjay stops filtering it and deletes the mail and settings it stored for that mailbox — your mailbox at your provider is untouched. We email you to confirm, and you can reconnect any time.

If a provider password or token expires, the mailbox shows an auth-error state and scanning pauses for it. The app surfaces a reconnect prompt; once you re-authenticate, new mail syncs automatically.