UMBRA Privacy Policy

UMBRA processes information depending on which features you choose to use. Not every user generates every category below.

• Account information — your email address and the authentication and account identifiers needed to sign you in and keep your account secure.
• Profile and onboarding information — age or date of birth, sex where supplied, height, weight, goals, experience level, preferences and related fitness profile information.
• Training information — training plans, exercises, sets, repetitions, loads, workout completion, skipped sessions, performance history and training feedback.
• Nutrition information — nutrition targets, food and nutrition logs, meal information, calorie and macronutrient information and nutrition history.
• Body-weight and progress information.
• Health and fitness information you authorize from Apple Health / HealthKit, Android Health Connect or compatible wearable integrations. Depending on the permissions you grant this may include activity and steps, workouts, heart rate, HRV, sleep, energy expenditure and related fitness and recovery information.
• Camera images or video when you deliberately use meal recognition, form and movement analysis, progress-photo or other camera features.
• Movement and form analysis outputs — pose and kinematic measurements and related derived fitness information.
• Device and app technical information necessary for operation, diagnostics, notifications and security.
• Subscription and purchase status. Payment processing itself is handled through the Apple App Store or Google Play and RevenueCat. UMBRA does not receive your full payment card details.
• Support communications you send to us.

This distinction matters, so we state it directly. Progress photos can be intentionally stored as part of your progress history when you choose to use that feature — that is the point of the feature.

Media that you submit only for a temporary analysis — for example a meal photo for recognition, or a video clip for form analysis — is intended to be processed for that analysis and then removed according to the application’s temporary-media handling process. UMBRA does not claim that it never stores photos or video; it claims that stored media and temporary analysis media are handled differently.

• Providing and maintaining your account.
• Generating and adapting your training and nutrition programs.
• Tracking your history and progress over time.
• Calculating fitness, recovery and adaptation insights.
• Processing camera and AI features that you request.
• Providing subscription and token entitlements.
• Security, fraud prevention, debugging and reliability.
• Responding to your support and deletion requests.

Information may be processed by service providers where that is required to operate a feature you are using. The current technical stack may include:

• Supabase — authentication, database and storage.
• Render — backend and API hosting.
• RevenueCat — subscription and in-app purchase entitlement management.
• Google Gemini / Google AI services — selected AI-assisted analysis and language and vision features.
• Cartesia — selected voice and text-to-speech functionality.
• Apple App Store and Google Play — mobile distribution and payments.
• Apple Health / HealthKit and Android Health Connect — user-authorized health data sources, where you enable them.

Not every user’s data goes to every provider. Information is shared or processed only where it is relevant to the feature being used.

UMBRA does not sell your personal or health information, and does not use health information for advertising, employment eligibility or insurance eligibility.

• Health and wearable access is optional and controlled through your operating-system permissions.
• Camera, microphone and notification permissions are requested only where relevant to a feature.
• You can deny optional permissions. Some related features may then be unavailable.

• Account, training, nutrition and progress history may be retained while your account is active, so the service can provide longitudinal and adaptive features.
• Progress photos you chose to save may remain stored as part of your progress history until you remove them, or until the related account or data is deleted.
• Media submitted only for temporary analysis is not stored as permanent progress history.
• When you request account deletion, associated account data is deleted, subject to limited information that may need to be retained for legitimate legal, financial, fraud-prevention or security obligations.

UMBRA uses reasonable technical and organizational safeguards, including authenticated access, access controls and encrypted network transport where applicable.

No online service can be described as completely secure, and UMBRA makes no such claim. UMBRA does not claim any certification, accreditation or compliance status that it has not been granted.

• Selected UMBRA features use automated and AI-assisted processing.
• AI-generated explanations or observations can be inaccurate and are not medical diagnoses.
• UMBRA's training, nutrition and movement system may combine deterministic calculations, your own data and AI-assisted interpretation, depending on the feature.

UMBRA is intended for general fitness and wellness. It is not a substitute for professional medical advice, diagnosis or treatment. If you have medical concerns, injuries or symptoms, seek appropriate professional care.

The current product is intended for adults aged 18 and over. It is not directed at children.

You can request deletion of your account and associated data at https://umbra.coach/delete-account, without reinstalling or opening the mobile app.

For any other privacy question or request, contact umbra@umbra.coach.

This privacy policy may be updated as the product evolves. When it changes, the current version and its date will be shown at the top of this page. The date shown today is 7 September 2026.