UmbraPrivacy policy
Short version: what you put in Umbra is encrypted on your phone with keys only you hold. We can't see it, we don't collect it, and we don't track you.
Who we are
Umbra is published by Promptify SRL, a company registered in Romania ("we", "us"). We are the data controller for the limited data described below. Contact: bogdan@promptify.ro.
Your vault contents
Photos, videos, files, notes, album names and vault names are encrypted on your device (AES-256-GCM) before they are stored. The keys come from your pattern and your recovery phrase, which never leave your device and are never sent to us. We have no copy of your keys, no account system and no way to read, recover or reset your data.
Encrypted iCloud backup (iOS, optional)
If you turn on iCloud backup, Umbra uploads already-encrypted data to your own private iCloud database at Apple. Only ciphertext is uploaded. Neither Apple nor we can read it without your recovery phrase. You can turn it off at any time in Settings. Encrypted backup files you export yourself are stored wherever you choose to save them.
Purchases
Payments are handled by Apple (App Store) or Google (Google Play). We use RevenueCat, Inc. to check whether you have an active Umbra Pro purchase. RevenueCat receives your purchase and subscription history together with a random anonymous identifier created by the app. It does not receive your name, email or any vault content. This data is used only to provide the features you paid for. See RevenueCat's privacy policy.
Apple Ads attribution (iPhone and iPad)
If you installed Umbra after tapping an Apple Ads ad in the App Store, iOS gives the app an attribution token from Apple's AdServices framework. The app passes that token to RevenueCat, which asks Apple which campaign led to the install, so we can tell which ads work. The token contains no personal identifiers, it is not linked to your vaults, and Umbra never asks for permission to track you or reads your advertising identifier.
What we do not collect
Umbra contains no analytics, advertising or crash-reporting SDKs. We don't track you across apps or websites, we don't sell data and we don't build profiles.
Device permissions
Photos: to import the items you pick and, if you ask, to remove the originals from your library. Camera and microphone: to capture photos and videos straight into your vault, and, only if you enable it, to take an intruder photo after repeated wrong patterns. Intruder photos stay on your device, encrypted. All permissions are optional and can be revoked in your phone's settings.
Data retention and deletion
Your vault data lives on your device and in your own backups until you delete it. Deleting a vault, or using "Erase all Umbra data", destroys the keys and files on that device. Purchase records are kept by Apple, Google and RevenueCat as required for billing and legal obligations.
Your rights
Under the GDPR and similar laws you can ask us about, correct or delete personal data we hold. Because we hold no vault data and no account data, most requests are answered by the controls in the app itself. For purchase records, contact us with your store receipt and we will coordinate with RevenueCat. You can also complain to your data protection authority (in Romania, ANSPDCP).
Children
Umbra is not directed at children under 13 and we do not knowingly collect their data.
Changes
If this policy changes we will update the date above and, for material changes, tell you in the app.