Umorrow Privacy Policy

Depending on how you use Umorrow, we may process account information, profile settings, timezone and language preferences, cycle and planning data, reminders, calendar events, device identifiers used for push notifications and basic analytics, optional Telegram identifiers, partner-sharing settings, and support messages. When you are signed in, Umorrow may register a device push token; whether notifications are displayed also depends on your system permission. If you choose Apple or Google sign-in, Umorrow verifies the provider identity token and retains the provider account identifier plus verified claims such as email or name when the provider returns them; the raw identity-token string is not retained. We use this data to provide and sync the app, show planning information, deliver reminders, maintain security, respond to support requests, understand basic feature usage, improve the product, and improve reliability.

Before sign-in, cycle settings and cycle history entered in the app remain in protected storage on the device. When you sign in, supported local records are transferred to your Umorrow account on our servers.

If you grant calendar access, Umorrow reads selected device calendars only on your device to show a read-only planning overlay. Their event details are not uploaded to Umorrow. If you enable the device-only outbound mirror, selected Umorrow plans are added or updated in a device calendar only after you enable that action, and the mirror stays on the device.

With Plus, Umorrow processes which plans you select for external publication, the feed privacy mode, and protected token material for a revocable secret .ics subscription. A calendar provider may fetch the selected event details; anyone with the URL can read its permitted contents until you rotate or revoke it, and Busy mode omits plan titles. If you connect Google Calendar, Umorrow stores an encrypted refresh credential and encrypted identifier for a dedicated calendar created by Umorrow. The Google permission is limited to calendars the app creates; Umorrow writes only the plans you select and does not read your other Google calendars.

Umorrow's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google Calendar data is used only to provide the calendar connection you request; it is not used for advertising, marketing, creditworthiness, lending, or training generalized artificial-intelligence or machine-learning models.

Apple or Google processes subscription payments and payment credentials for purchases made through the App Store or Google Play. To provide Umorrow Plus, we receive verified transaction and subscription status data from the applicable store and associate it with an opaque account identifier. We store entitlement status and a protected provider transaction reference, but we do not receive or store your complete card or bank account details.

Umorrow may process limited analytics, crash logs, server logs, and diagnostic information to understand basic feature usage, improve the product, monitor reliability, and fix errors. Representative analytics include app opens, onboarding and sign-in completion, notification permission and push-registration results, allowlisted reminder or event categories, activation and retained-planning milestones, partner or external-calendar actions, subscription-flow results, and crash reports; Umorrow does not send event titles, reminder text, cycle dates, or precise location as analytics parameters. We use Fly.io for hosting, Apple and Google for store subscription billing, Apple Push Notification service and Firebase Cloud Messaging for notifications, Firebase Analytics and Crashlytics for basic analytics and diagnostics, and Sentry for server error monitoring when enabled. Firebase Analytics may derive an approximate region from a masked IP address; Umorrow does not request or store precise GPS location. If you use Telegram, its identifier is processed to deliver bot messages.

We do not sell personal data, use it for targeted advertising, or share it with third parties for marketing. Partner data is shared only according to the sharing level you select. Service providers process data only to provide contracted services under our instructions and must apply the same or an equivalent level of privacy protection under their contracts and applicable law. They may process data in other countries using their applicable safeguards.

You can revoke or rotate the secret .ics feed, disconnect Google Calendar, withdraw device-calendar or notification permission, and change partner sharing. Revocation stops future Umorrow access or publication. A calendar provider may retain a previously fetched or exported copy until it refreshes or you delete that copy there.

We use encrypted network traffic, password hashing, and access controls for production systems. No internet service can be guaranteed to be completely secure.

We retain account data while your account is active or as needed to operate the service. You can delete your account in the app under Settings, Preferences, Delete Account, or follow the public instructions on the delete account page. Account deletion removes active Umorrow server records and invalidates the secret feed. Before deleting your account, disconnect Google Calendar in the app and remove any remaining Umorrow calendar or events from the provider. Automated database snapshots may retain deleted server records for up to five days and are isolated for disaster recovery only. Calendar providers may retain previously fetched or exported copies, and store billing records remain subject to Apple or Google retention rules. Aggregated or account-unlinked analytics and scrubbed diagnostics that cannot be matched back to the deleted account remain subject to the applicable processor's retention setting. We retain an identifiable record longer only when required for a legal obligation, fraud prevention, security, or a dispute.

You may contact us to request access, correction, deletion, or a copy of your personal data, subject to applicable law and identity verification.

Umorrow is not directed to children. We do not knowingly collect personal data from children under 13 or the applicable minimum age in their country.

For privacy questions, email info@umorrow.app.