Privacy Policy

Last updated: 27 October 2026

Umber is a personal assistant provided by Umber AI Inc. To help you, it needs to see some of your information, such as the messages you send it and, if you choose, your email and calendar. This policy explains what Umber collects, how it uses and shares that information, how long it keeps it, and how you control it.

If you have a question about this policy or your data, email support@umber.ai.

Information we collect

Account information: your name, email address and sign-in details. If you sign in with Google or Microsoft, we receive the name, email address and profile picture that the provider shares.
What you tell Umber: the messages, voice requests, files and photos you send, and the notes and preferences Umber remembers so it can help you next time.
Accounts you connect: if you choose to connect a service, such as Gmail, Google Calendar or Microsoft Outlook, Umber receives the data that service shares under the permissions you approve. The Google section below describes exactly what Umber receives from Google.
Location: if you turn on leave-by alerts, your iPhone's location, so Umber can tell you when it's time to leave. Turn it off any time in Settings → Location.
Health data from Apple Watch: if you allow it, your steps, heart rate and active energy, so Umber can take how your day is going into account. Umber never uses health data for advertising and never sells or shares it, except with the service providers named below that run Umber for us. Turn off access any time in the Health app.
Device and usage information: app version, device type, error reports and which features are used, so we can keep Umber working and fix problems.

How we use your information

To provide the features you use: answering you, sorting and summarizing your email, planning around your calendar, reminding you, and remembering what matters to you.
To keep Umber secure, prevent abuse and fix problems.
To contact you about your account and the service.

We don't sell your personal information, and we don't use it for advertising.

Google user data

When you connect Google, Umber asks for:

Sign in with Google: your name, email address and profile picture (openid, email, profile), used to create and sign in to your account.
Gmail, read-only (gmail.readonly): Umber reads your messages so it can sort what needs you, summarize them, pull out dates, bills and appointments, remember who sends what, find an email when you ask, and draft replies in your own writing style. Umber cannot send, delete, archive, label or change anything in your Gmail. When Umber drafts a reply, you copy it or open it in Gmail and send it yourself.
Google Calendar (calendar.readonly, calendar.events): Umber reads your calendar so it can plan around it, and adds or updates events only when you ask it to.

How we process it

Email and calendar content is processed by Umber's servers on Amazon Web Services and by AI model providers that act on our behalf only to produce the result you asked for: Fireworks AI, Amazon Bedrock and OpenRouter (which passes some requests, such as turning text into search vectors, to the model's provider, for example Google).
Under their published terms, none of these providers uses your content to train its models. Fireworks AI doesn't log or store requests to the open models we use, and our OpenRouter account only routes to providers that don't keep requests (zero data retention). Amazon Bedrock may keep a request for a limited time to detect abuse, and doesn't share it with the model's maker.
We don't sell Google user data, use it for advertising, or use it to train generalized AI models.
People at Umber don't read your email or calendar. The exceptions are when you ask us to (for a specific support case, for a limited time), when it's needed for security (for example, investigating abuse), or when the law requires it.

Storage and security

OAuth tokens are encrypted with AWS KMS keys we control.
Data is encrypted in transit (TLS 1.2 or later) and at rest.
Copies of email headers and snippets are kept for up to 90 days to power your cards and search. Summaries and facts Umber remembers are kept until you delete them or your account.

Your control

Remove Umber's access any time at https://myaccount.google.com/permissions, and Umber stops reading your Gmail. Stored copies of email headers and snippets expire within 90 days, or email support@umber.ai to have them deleted sooner.
What Umber learned from your email, such as who your child's coach is, stays so Umber can keep helping you, until you ask Umber to forget it.
Disconnect Google Calendar any time in Settings → Integrations, and Umber stops reading your calendar.
Deleting your account in Settings → Privacy deletes your Umber account data after a 30-day grace period. Also remove Umber's access in your Google Account, and email support@umber.ai to confirm the deletion is complete; we'll remove anything that remains.

Umber's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Umber does not use Google Workspace API data (such as Gmail or Google Calendar data) to develop, improve, or train generalized or non-personalized AI and/or ML models.

We share your information only:

with service providers that host, secure and run Umber for us (such as Amazon Web Services and the AI model providers named above), only to provide the service;
with services you connect or ask Umber to use on your behalf;
when the law requires it, or to protect the safety and security of our users and the service;
as part of a merger or sale of the business, in which case this policy continues to apply to your information.

How long we keep information

Your account information and what Umber remembers are kept while your account is open, until you delete them.
Copies of email headers and snippets are kept for up to 90 days. Email support@umber.ai to have them deleted sooner.
What Umber learned from your email is kept until you ask Umber to forget it or delete your account.
When you delete your account, your Umber account data is deleted after a 30-day grace period, during which you can change your mind. Email support@umber.ai to confirm the deletion is complete; we'll remove anything that remains. Backups and logs that may still hold it expire on their own schedule.

Your choices and rights

See and export: Settings → Privacy lets you export your data.
Correct or delete: you can ask Umber to forget something, remove Umber's access to a connected account in that account's own settings (for Google, at https://myaccount.google.com/permissions), and delete your Umber account in Settings → Privacy.
Ask us: email support@umber.ai for any request about your data. Depending on where you live, you may have further rights, such as to object to or restrict processing; we'll honor them as the law requires.

Children

Umber isn't directed at children under 13, and we don't knowingly collect personal information from a child under 13 except through a parent. A parent can invite a child into a Family account. The parent sets it up, chooses the child's role and what the child can see and do, and can remove the child from the family at any time. A parent can ask us to delete a child's information by emailing support@umber.ai. If we learn we've collected information from a child under 13 without a parent's involvement, we'll delete it.

Changes to this policy

If we change this policy, we'll update the date at the top. If a change materially affects how we use your information, we'll tell you in the app or by email before it takes effect.

Contact

Email support@umber.ai.