Privacy Policy

Last updated: September 15, 2026

                In short: Umbra has no account and no server. What you log stays on your iPhone and, if you leave sync on, in your own private iCloud, where neither Apple nor we can read it. We collect nothing. You can export everything as CSV or delete everything from Settings at any time.
            

Who we are

Umbra is a migraine diary for iPhone made by Luka Hristic. It is one person, not a company. This policy describes what the app does with the information you enter, in plain terms. Every statement below is true because of how the app is built, not because of a promise: there is no account system and no server of ours that could hold your data.

What you enter, and where it lives

Umbra stores what you log: attacks and symptom days, their start and end times, intensity, symptoms, pain type and location, triggers, notes, medications and doses, your answers to the MIDAS questionnaire, and the preferences you set in Settings.

All of it is stored in a database on your device. The widgets, the Control Center control, the Live Activity and Siri read and write the same database through an app group, entirely on the device.

iCloud sync

Sync is on by default and free. It uses Apple's CloudKit framework and your private CloudKit database, which is tied to your Apple Account and encrypted by Apple. We have no access to it: there is no Umbra server in the path, and no way for us to query your records. If you turn sync off in Settings → Data, nothing further leaves the device and the app keeps working in full. Turning it back on uploads what was logged while it was off.

The PDF report and the CSV export

Both are generated on your device and handed to the system share sheet. Where they go from there is your choice: AirDrop, Files, Mail, or wherever you send them. We never receive a copy.

Siri and App Shortcuts

"Log a migraine in Umbra" and the other phrases are App Shortcuts. When you say one, Siri's speech recognition is handled by Apple under Apple's own privacy terms; the intent then runs inside Umbra on your device and writes to the same local database. Umbra receives nothing about the request beyond the action itself.

What we do not collect

No account, no sign-up, no email address, no name. The app never asks.
No analytics of any kind on your entries. We do not know how many attacks you log, or that you log any.
No usage analytics, no crash reporting service, no advertising, no tracking, no fingerprinting.
No location, no contacts, no photos, no health data from Apple Health. Umbra does not use HealthKit.
No server-side processing. Insights and the MIDAS score are computed on the device.

Umbra's privacy manifest, shipped inside the app, declares no data collected and no tracking. Its App Store privacy label says the same: Data Not Collected.

Umbra Pro and purchases

Umbra offers an optional subscription and a one-time purchase, "Umbra Pro", through Apple's In-App Purchase. Billing is handled by Apple; we never see payment details.

To know whether Pro is active, the app uses RevenueCat. RevenueCat receives a random, anonymous app-user identifier generated on your device and the purchase transaction data Apple provides. It receives nothing you log: no attacks, no medications, no answers, no health information of any kind. RevenueCat is the only third-party service in the app.

Notifications

Umbra sends at most two kinds of notifications, both optional and both scheduled locally on your device: a reminder to answer MIDAS again every three months, and a notice when a dose lands inside a window or limit you configured for a medication. No notification content goes through a server of ours, and no notification ever promotes Pro. You can turn them off in Settings → Reminders or in iOS Settings.

Your control

Export all my data (CSV), in Settings → Data, gives you every entry as a spreadsheet.
Delete all my data, in Settings → Data, removes every attack, symptom day, medication, dose and MIDAS answer from the device and from your iCloud. Other devices signed in to the same Apple Account receive the deletion the next time they sync. This cannot be undone.
Sync with iCloud, in Settings → Data, can be turned off at any time.
Deleting the app removes its local data. iCloud records remain in your account until you delete them from the app first, or remove Umbra's data from iCloud in iOS Settings → Apple Account → iCloud.

Children

Umbra is not directed at children under 13, and we knowingly collect nothing from anyone, of any age.

Your rights

Under the GDPR, the CCPA and similar laws you have rights to access, correct, export and erase your personal data. Because the data lives only on your device and in your own iCloud, you exercise all of them directly, from Settings, without asking us: we hold nothing to hand over or erase. There are no international transfers of your data by us, because we never receive it. If you have a question anyway, write to support@umbradiary.app.

Changes

If this policy changes, the new version is published at this address with a new date. A change that made the app collect something would be announced in the app before it took effect.

Contact

support@umbradiary.app