Effective 29 July 2026
In short: Umbriel is yours by default. The astrology is calculated right on your device, like a calculator in your hand. Your birth details, saved people, and journal stay on the device you're using and aren't sent anywhere unless you choose an optional cloud feature, and even then, your personal data is encrypted on your device first. You can delete it any time. We never sell your data, and there are no ads.
By default, everything you create. Your birth chart details, the people you save, your journal, notes, and (for astrologers) your client records and reports: is stored locally in your browser on the device you're using. It is not transmitted to us or anyone else. If you never turn on an account, nothing personal leaves your device.
Because your things live on your device, they live and die with it. If you're not using an account and your phone is lost or damaged, or your browser's site data gets cleared, then your journal, your saved people, your University progress and (for astrologers) your client records are gone for good, and we can't get them back for you, because we never had a copy. It's not that we won't; it's that there's genuinely nothing on our side to restore.
If that would hurt to lose, turn on account sync, it quietly keeps an encrypted backup in the cloud and carries your Observatory across your devices. Think of it as the safety net under the trapeze.
A few features are opt-in and only use the cloud when you turn them on:
We use privacy-respecting analytics to understand how Umbriel is used and improve it. We don't run ads or sell your information.
It's cookieless and respects your browser's Do-Not-Track setting. To see where the app confuses people, we may record anonymised session replays, but everything you type (birth details, journal entries, searches) and other sensitive on-screen content is masked, so it never appears in a recording.
When you use sync, the data leaving your device is encrypted in your browser before it is uploaded, with a key derived from your account password. Data is protected in transit, and the synced copy at rest is ciphertext: your journal, your saved charts, your notes and your birth details are not readable in our database.
We keep a spare key, and you should know it exists. It is held separately from the database, so that forgetting your password does not cost you everything you have written. If you reset your password, that spare key lets your data be unlocked again on your next sign-in.
The honest part: a spare key means we could, in principle, decrypt your synced data. We only ever do it to give your data back to you: never to read it, never to share it, and never for advertising. If you would rather no such key existed, keep your data on your device and do not turn on sync: nothing leaves your browser until you ask it to.
Not everything is encrypted, and it would be misleading to imply otherwise. Your streaks, progress, membership, settings, achievements and anything you post in the community are stored as ordinary, readable data, because they have to be for those features to work. It is your private writing that is encrypted.
Because your data lives on your device by default, you control it directly: clearing your browser's site data removes it. If you've turned on an account, you can delete your synced data at any time from within the app, and deleting your account removes your synced records from our servers. The steps, and exactly what is deleted and what is kept, are on Delete your account.
Umbriel is not directed to children under 13, and we do not knowingly collect personal information from them. Umbriel also contains a mature "Shadow" area intended for adults (18+), which is kept behind an age gate.
If this policy changes, we'll update the date at the top and post the revised version here.
Questions about your privacy? Email hello@umbrielastrology.com.