Privacy Policy

Umbral is a daily practice app for people who experience sleep paralysis. Your practice data is personal, and the app is designed to keep it that way. This policy explains what data Umbral collects, what it does not collect, and how you stay in control.

Your practice data stays on your device

All of your practice data, including session history, journal entries, voice recordings, settings, and streak progress, is stored on your iPhone using Apple's SwiftData framework. If you have iCloud enabled, your data syncs to your personal iCloud account so it's available across your devices. This sync is between you and Apple — Umbral has no server, no user accounts, and no access to your iCloud data. Umbral never sees your journal entries, voice recordings, or practice details.

Analytics (iOS app)

Umbral uses PostHog to collect anonymous usage analytics in the iOS app. This helps improve the app over time. The events tracked include:

• Session activity (started, completed, paused, ended early, duration, breathing pattern selected)
• Onboarding selections (intent choice, not personal details)
• Journal activity (number of fields filled, whether mood/impressions/symbols were used, but never the actual text content)
• Settings changes (breathing pattern, reminders, duration selection)
• Streak milestones

Umbral does not track the content of your journal entries, your personal reflections, or any free-text input. PostHog is configured with person_profiles: identifiedOnly, meaning anonymous users are not profiled.

Analytics (website)

Umbral uses PostHog on the website (getumbral.app) to track page views and general site usage. PostHog's autocapture feature collects interaction data like clicks and page navigation. No personal information is collected unless you voluntarily provide it (for example, by entering your email).

Email collection

If you choose to sign up for updates on the website, your email address is collected and sent to MailerLite for the purpose of sending updates about Umbral. The iOS app does not collect your email address.

What Umbral does not do

• Umbral does not sell or share your personal data with advertisers or data brokers.
• Umbral does not read or transmit your journal entries or practice notes.
• Umbral does not use tracking pixels in emails beyond MailerLite's standard open/click tracking.
• Umbral does not create user profiles for advertising purposes.

Third-party services

Umbral uses two third-party services:

• PostHog (analytics) processes anonymous usage events from both the iOS app and the website. PostHog's privacy policy.
• MailerLite (email) stores email addresses for users who voluntarily subscribe on the website. MailerLite's privacy policy.

Deleting your data

App data: Delete the Umbral app from your iPhone to remove all local data. If you use iCloud sync, your data may also be stored in your iCloud account — you can remove it through Settings > Apple ID > iCloud > Manage Storage.

Email list: Every email includes an unsubscribe link. You can also contact hello@getumbral.app to request removal from the mailing list.

Analytics data: Contact hello@getumbral.app to request deletion of any analytics data associated with your usage.

Children

Umbral is not directed at children under 13. Umbral does not knowingly collect personal information from children under 13. If you believe a child has provided personal information, please contact hello@getumbral.app.

Changes to this policy

If data practices change, this page will be updated and the "last updated" date above. For significant changes, subscribers will be notified via email.

Contact

Questions about this policy? Reach us at hello@getumbral.app.

Henry Doce, operating as Umbral