Your files stay with you.

Who is the data controller

The data controller is Rosen Mitev Dimitrov, the creator of UmbaIA. For anything related to your privacy, write to hello@imrosen.eu.

What stays on your computer

Your creations and their files, your conversations with UmbaIA, what UmbaIA remembers about you to help you better and your settings are saved only on your device. We have no access to any of this. Your keys (the artificial intelligence one, the Netlify or Cloudflare one and the licence one) are stored encrypted with the protection of Windows. If you uninstall UmbaIA or delete your creations, that information disappears from your device.

What leaves your computer, and only when you use it

• Artificial intelligence provider. What you write, the images you attach and the files of the creation that are needed for each task are sent directly from your device to the provider you have chosen: DeepSeek (by default), OpenAI, Google Gemini, Mistral or OpenRouter. You contract it yourself with your own account, and that provider processes the data according to its own privacy policy, as an independent controller. DeepSeek keeps its servers in China, a country that the European Union does not consider to have an equivalent level of protection. That is why we recommend that you do not include sensitive data or other people's personal data in your requests. If you use Ollama, the artificial intelligence runs on your own computer and nothing is sent.
• Publishing online. When you publish a creation, its files are sent to your Netlify or Cloudflare account. You are the owner of that account and of what you publish in it.
• Checking a domain. If you search for or connect a domain, its name is checked with Cloudflare (a DNS service) to see whether it is free or properly set up.
• Searching for free images. If UmbaIA looks for royalty-free photos for your creation, it sends the search words to Openverse and Wikimedia Commons.
• Installing tools. If you give permission to install something your creation needs (for example, Python or a package), it is downloaded from its official website.
• Checking your licence. If you activate Pro, your licence key and your computer's name are sent to Lemon Squeezy, when you activate it and afterwards at most once a day, only to check that it is still active.

When you buy Pro

Payments are handled by Lemon Squeezy, which acts as the seller: it charges, issues the invoice and takes care of taxes. To do so it collects your payment details according to its own privacy policy. From that purchase, we receive your name, your email, your country, what you have bought, the amount, the dates and the status of your subscription and of your licence. We use them to give you access to Pro, to help you, to handle refunds and to comply with our legal obligations. The legal basis is the contract we have with you and compliance with legal obligations. We keep them while you have the subscription and, afterwards, for the periods required by tax and commercial law (up to 6 years).

When you write to us

If you write to us by email, we use your address and your message only to answer you. The legal basis is your own request. We delete those emails when they are no longer needed and, at most, 2 years after our last contact. We will never send you advertising without your permission.

This website

umbaia.com does not use cookies, has no analytics tools and does not load resources from other websites. It is hosted on Cloudflare, which, like any server, processes technical data from your visit (such as your IP address and your browser) to show you the page and protect it from attacks, for a limited time. The legal basis is our legitimate interest in the website working and being secure. If you click a buy button, you go to the Lemon Squeezy website, which has its own cookie policy.

Sending data outside the European Union

Lemon Squeezy and Cloudflare are companies from the United States. When they process data from the European Union they do so with the safeguards required by law, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. What you send to your artificial intelligence provider you send yourself, directly with your account, depending on the country where that provider is (in the case of DeepSeek, China).

What we don't do

We don't sell or rent your data. We don't use it for advertising or to create profiles. We don't use your creations or your conversations to train artificial intelligence. We don't make automated decisions that affect you.

Minors

UmbaIA is designed for people aged 14 and over. To buy Pro you must be of legal age or have the permission of your mother, father or guardian.

Your rights

You can ask us to access your data, correct it, delete it, object to its use, restrict it or receive it in a format you can take somewhere else. Write to hello@imrosen.eu from the email address we know you by; we will answer within one month at most. For data held by other companies (your artificial intelligence provider, Lemon Squeezy, Netlify or Cloudflare), you can go to them; if you need it, we will help you. If you think we haven't handled your data properly, you can file a complaint with the Spanish Data Protection Agency (https://www.aepd.es).

Security

All of UmbaIA's connections with other services are encrypted. Your keys are stored encrypted on your device and are never sent to anyone other than the service they belong to.

Changes to this policy

If we change something important, you will see it in the app and on this page, with the update date.

More information: Terms of use and Refunds and cancellation.