UmbraPrivacy Policy — Umbra
Umbra is a private, end-to-end encrypted chat app made by Sema Katejae ("we", "us"). This policy applies to Umbra on both iOS and Android — same app, same policy.
1. No account, no phone number
Umbra does not require sign-up. There is no username, email, or phone number tied to your identity. Your identity is a cryptographic key pair generated on your device and shared with a friend only when you both scan each other's QR code in person.
2. What we do NOT collect
- Contact list content — the list of people you've added stays only on your device. Umbra has no server-side friend directory or contact graph.
- Message content — chats are end-to-end encrypted. Only you and your contact can read them. Message history is stored encrypted, on-device only.
3. What we DO collect
- Push notification handle (opaque device token) — so we can send a wake-up ping (e.g. "you have a new message") to your device. It never carries message content and is deleted when you remove the app or disable notifications.
- Purchase history for Umbra Pro — processed entirely by Apple's App Store or Google Play. We receive only a purchase confirmation (no card numbers) to unlock Pro features.
- Basic crash/diagnostic data, if your OS-level crash reporting is enabled — standard Apple/Google platform behavior, not something Umbra adds on top.
4. How we use this data
- Push token → deliver wake notifications only.
- Purchase confirmation → unlock Umbra Pro entitlements.
We do not use any data for advertising, profiling, or analytics. Umbra has no ads and no third-party trackers.
5. Data sharing
We do not sell your data and do not share it with third parties for marketing. The only data that leaves your device is the opaque push token (sent to our push gateway) and the purchase receipt (handled by Apple/Google during checkout).
6. Data retention & deletion
Messages and contacts live only on your device. Deleting a chat, a contact, or uninstalling the app removes that data immediately — there is no server-side copy to delete. Push tokens are removed from our push gateway when you uninstall the app or turn off notifications.
7. Security
- Messages are end-to-end encrypted between you and your contact.
- On-device chat history is encrypted at rest using the OS-provided secure keystore (iOS Keychain / Android Keystore).
- Connections to our push gateway use HTTPS/TLS.
8. Children
Umbra is not directed at children under 13. We do not knowingly collect data from children.
9. Changes to this policy
If this policy changes, we will update the date above and note it in the app's "What's new" release notes.
10. Contact us
Questions about this policy or a data rights request: