Privacy policy

What Umbra stores

Umbra stores your normalized email address, plan, email-verification state, device labels, session creation and last-seen times, and billing identifiers when you use a paid plan. Request logs may include the request path, status, duration, and client IP address. They never include request bodies or vault plaintext.

Your vault is encrypted on your device before upload. The service stores ciphertext blobs, encrypted manifests, content identifiers, file sizes, and version relationships. Umbra does not receive your passphrase, master key, note titles, paths, or file contents.

Why it is used

Account metadata is used to authenticate you, operate synchronization, enforce storage quotas, prevent abuse, provide support, process billing, and protect the service. Encrypted vault data is stored only to provide synchronization, version history, and recovery.

Processors and disclosure

Stripe processes paid-plan checkout and billing data. The configured email provider delivers verification messages. Hosting and backup providers store service data on the operator's behalf. Umbra does not sell personal data or use vault data for advertising or model training. Data may be disclosed when legally required or to protect users and the service.

Retention and deletion

Account and encrypted vault data remain while your account is active. Deleting the account removes the live account, sessions, manifest, keys, and ciphertext from primary storage. Encrypted remnants can remain in rotating backups until those backups expire. Security logs are retained only for operational and abuse-prevention needs.

Your choices

You can review account and session information, revoke devices, and permanently delete the account from the account dashboard. Use the account dashboard to request help with access, correction, export, or deletion rights available in your jurisdiction.

Security and recovery

Transport encryption, end-to-end encryption, hashed authentication material, and access controls protect the service. No system is risk-free. Because Umbra is zero-knowledge, the operator cannot recover your vault if you lose both your passphrase and recovery key.

Changes

Material changes will be announced in the service before taking effect. Continued use after the effective date means the updated policy applies.