What the app reads
GrabMyOTP reads, through the Windows accessibility feature (the same one screen readers use), only the text that is already visible in the browser window you chose. It does not open emails, does not click anything, does not access your email account and does not read other windows.
The text it reads stays only in the app's memory for as long as it takes to look for codes and is then discarded. It is not written to disk.