Privacy Policy
Umbra is a DNS firewall that runs entirely on your phone. It has no accounts, no analytics, no advertising, and no servers of its own. The list below is everything that leaves the device, and why.
What Umbra does
Umbra installs a local VPN configuration that routes only DNS lookups through the app. Lookups for known tracker domains are answered locally with a null address. Every other lookup is forwarded, encrypted, to a public DNS resolver you choose. Umbra never carries your web traffic; it sees domain names, not page contents.
Data that stays on your phone
- DNS log. Each lookup's domain name, time, record type, and whether it was blocked. Kept for seven days, then deleted automatically. You can clear it at any time in Settings.
- App Privacy Report imports. If you share Apple's App Privacy Report with Umbra, the per-app domain records in it are stored on the phone for up to thirty days so the Apps tab can show which apps contact which trackers.
- Your rules and names. Domains you block or allow, and any app names you set.
None of this is uploaded, synced, or shared. It lives in Umbra's private storage on your device and is removed when you delete the app.
Data that leaves your phone
| Sent | To whom | Why |
|---|---|---|
| DNS lookups | The resolver you pick in Settings: Quad9 (default), Cloudflare, Mullvad, or a custom server | To resolve domain names that are not blocked. Sent over HTTPS. Each resolver's own privacy policy governs what it retains. Umbra's default, Quad9, states that it does not log client addresses. |
| App bundle identifiers | Apple (itunes.apple.com) | To fetch the icon of each app shown on the Apps tab. Only the identifier is sent, for example com.spotify.client. Icons are cached on the phone. |
That is the complete list. Umbra makes no other network requests and has no server that receives anything from you.
What Umbra does not do
- No account or sign-in.
- No analytics, crash reporting, or advertising frameworks.
- No inspection of web page contents. Encrypted traffic stays encrypted.
- No selling, sharing, or disclosing of any data to third parties, ever.
Permissions
Umbra asks iOS for permission to add a VPN configuration. This is how iOS lets an app act as the phone's DNS server. Umbra does not use this to route any traffic other than DNS.
Children
Umbra is not directed at children under 13 and collects no personal information from anyone.
Changes
If this policy changes, the date at the top changes with it and the new version ships with the app update that needs it.
Contact
Questions about this policy: cadekukk@gmail.com.