Privacy

Vishal Ram, Westliche Stadtmauerstrasse 54, 91054 Erlangen, Germany. Contact: privacy@think-umbra.fyi.

I am the data controller for the purposes of the GDPR. There is no data protection officer; for anything about this policy, email the address above.

Your boards, notes and documents. On your own computer. They are not uploaded anywhere unless you turn on sharing or backup.

Your email address and password. Held by Supabase, who provide the sign-in. The password is stored by them as a hash; it never reaches my server in any form.

Your subscription. An email address, the plan, its expiry, and the identifier of the one device currently signed in. Held in Cloudflare KV so the app can check what you have paid for.

Shared boards. Encrypted on your machine before upload, and stored in Cloudflare R2 as sealed data. The key stays with you and the people you share with. I cannot read them, and neither can Cloudflare.

Your board keys, if you choose to back them up. Stored sealed, wrapped with a key derived from your password. Your password is not stored with them, so the vault cannot be opened without you.

Payment details. Never seen by Umbra. Polar Software Inc. is the merchant of record and handles the payment and its records; card details do not pass through any system of mine.

No analytics, no telemetry, no usage tracking, no advertising identifiers, and no cookies beyond the session that keeps you signed in. This site loads no tracking scripts. Nothing reports what you do inside the app.

AI requests go from your computer to whichever AI tool you have installed, under your own account with that provider. They do not pass through Umbra, and I never see their contents.

Cloudflare (hosting, storage and the sync relay), Supabase (sign-in), and Polar (payments, as merchant of record). If you connect Google Drive for backup, your files go to your own Drive account and Google processes them under your agreement with them, not mine.

Your email address and subscription record are processed to perform the contract you enter into when you buy Collaboration (Art. 6(1)(b) GDPR) — without them the app cannot tell whether you have paid. Sealed board data is processed on the same basis, to provide the sync you asked for.

Your subscription record is kept while the subscription is live and for as long as German tax law requires records of the sale to be retained. Sealed board data is kept until you delete the board or the account. Everything else is deleted with your account.

You can ask for a copy of your data, ask for it to be corrected or deleted, object to its processing, or ask for it to be exported. Email the address above and I will answer within 30 days. You can also complain to your local data protection authority; in Bavaria that is the Bayerisches Landesamt für Datenschutzaufsicht.

Deleting your account removes your sign-in, your subscription record and your sealed data from the relay. The copies on your own computer stay yours and are not touched.

Cloudflare, Supabase and Polar are US companies and may process data outside the EU, under the standard contractual clauses their terms provide. The data that reaches them is what is described above: an email address, a subscription record, and encrypted blobs.

If this policy changes in a way that affects what is collected, the date at the top changes and the change is described in the app’s release notes.