Umbré is a sun-safety app. It keeps what you record on your own phone.
Umbré keeps everything on your phone. There are no accounts, there is no server, and nothing you record is sent anywhere on its own. One thing leaves your device automatically — a pair of map coordinates, sent to a weather service to ask what the UV is there. One other thing can leave it, but only when you deliberately choose to send it: a diagnostic report, described below.
All of it stays in the app's own storage on your device:
Deleting the app deletes all of it. There is no copy anywhere else, and nothing to request or erase from us, because we never receive it.
Automatically: only your coordinates, and only to fetch a forecast. When the app needs to know today's UV, it sends a latitude and longitude to a weather service and receives a forecast back. That request carries no name, no identifier, and nothing from your log.
The weather service is currently Open-Meteo (open-meteo.com). The app is expected to move to Apple WeatherKit before release; this policy will be updated to name whichever is in use.
There is a "Diagnostics" screen under You. It shows what the app can say about itself — the app version, your phone's model and system version, which reminders are switched on, whether the last forecast succeeded, and a short list of recent errors.
Nothing about it is automatic. The app never sends it, never uploads it in the background, and never contacts anyone about it. It is shown to you on screen, and there is a button that hands it to your phone's normal share sheet so that YOU can send it — to us, or to nobody. If you never press it, it never goes anywhere.
The report deliberately contains no name, no age, and no precise location: it says only whether you have filled those in, and it rounds any coordinates to roughly a city rather than a street. It contains nothing from your sunscreen log beyond how many entries there are.
It exists because the app runs on phones the people who build it cannot connect to, and a report you can send in one tap is the difference between a bug being fixed and being guessed at.
The app asks for location only while you are using it. It never asks for background location and never tracks where you go. You can decline, and the app still works — you would set a location manually or simply not see a UV reading.
Reminders are scheduled on your phone by your phone. Nothing is sent from a server, and no one is notified but you. You can turn each type off individually, or refuse notifications entirely.
There are none. No analytics, no advertising, no third-party trackers, no crash reporting service, and nothing sold or shared with anyone.
The app is not directed at children and collects nothing that would identify anyone, of any age.
Umbré gives general sun-protection guidance. It does not diagnose anything and is not a medical device. The skin-type questionnaire is a self-assessment, not a clinical result. Nothing you enter is health data held by us, because nothing you enter reaches us.
If the app ever starts sending anything else anywhere, this policy changes first, and the change is described here rather than quietly made.
*s.azarskyy@gmail.com*