Your domain's email,
in your own AWS.

No. Your mailbox and every message live inside your own AWS account. MailPoppy operates no servers that receive, store, or have access to your email — it is private by architecture, not just by policy.

No. You don't need any cloud experience — if you've never created an AWS account or set up infrastructure in your life, you'll be fine. MailPoppy is an app you install on your own computer (Mac or Windows); you follow plain-language, on-screen steps, and it deploys the whole email backend for you — inbound and outbound mail, storage, anti-spam and DNS records included. No servers to run, no command line, no config files. Most people go from nothing to a working, professional email setup for their domain in about five minutes.

As many as you want. Once your domain is set up, creating a new mailbox takes seconds, and there's no per-seat fee — add one address or a hundred for the same flat AWS usage. Each mailbox can have its own storage limit.

Owning your email is free: the desktop app, the email backend it deploys, unlimited mailboxes and webmail in the browser. Your only running cost is your own AWS usage — typically a few dollars a month for a whole domain, with no per-mailbox fee. The one paid extra is the MailPoppy mobile app (iPhone and Android, with push notifications): it's priced once per domain and paid by the admin, so it covers every mailbox on that domain and the people using them never pay anything. Exact mobile pricing is coming soon.

Yes. MailPoppy is built for your custom domain. It sets up the sending records (SPF, DKIM, DMARC and a custom MAIL FROM) so your mail lands in the inbox, not the spam folder.

Yes. MailPoppy can import your existing mailboxes over IMAP, so you keep your history when you switch.

There is no lock-in. A single action tears the whole deployment back down and removes it from your AWS account. Your data was always yours — and it stays that way.

Mail is filtered for spam and, optionally, scanned for malware with AWS GuardDuty. You set retention, per-mailbox storage limits and your AWS region, so you control where your data lives and how long it's kept. And because the engine is open source, the security is verifiable — you don't have to take our word for it.

Yes — all of it. MailPoppy is open under the MIT license: the desktop app, the mail backend that runs inside your AWS, the infrastructure definition with its least-privilege IAM policies, and the local component that handles your AWS credentials. Read it, run it, build on it — nothing is a proprietary black box. MailPoppy funds itself through an optional paid mobile app (priced per domain), never by keeping the code secret.

You can verify it instead of trusting a promise. Because the code that runs in your AWS and the code that touches your AWS credentials are open, you — or your security team — can read exactly what MailPoppy does: that your mail never leaves your account, and that your keys are never sent to us. "Private by architecture" is a claim you can check line by line.

No. The admin app runs on your own computer and talks directly to AWS — there is no MailPoppy server in the middle. Your keys are saved only in your standard AWS config file (~/.aws/credentials, owner-only permissions), in a separate "mailpoppy" profile that never alters your other profiles, and they are never sent to us or written to logs. For extra peace of mind, connect a least-privilege IAM user or temporary SSO credentials — and revoke them whenever you like.

No — and you shouldn't. MailPoppy only needs permission to create and manage its own email stack. Connect a dedicated IAM user limited to those permissions (or temporary IAM Identity Center credentials) instead of your root or full-admin keys, so the app can never touch anything else in your account. You can delete that user, and tear the whole deployment down, at any time.

Everywhere: a webmail client in any browser, plus native apps for iPhone and Android. The desktop app is for the administrator who sets everything up.