Umade privacy policy

Updated October 18, 2026.

Umade runs small apps that you make (for example with Claude) or add yourself, and keeps what they save on your phone. This policy explains what Umade does with your data. In short: your apps and their data stay on your phone, Umade has no ads, and it doesn't sell or share your data.

Data on your phone

• The apps you add, what they save, the API keys you give them, and your choices about what each app may use are stored on your phone, in Umade's private storage, along with a backup copy that Umade uses to recover them if the phone's web storage is damaged.
• Deleting an app in Umade deletes it, its data, its keys and anything it scheduled. Uninstalling Umade deletes everything.

Phone features

Apps you run can ask Umade for the camera, microphone, location (including location in the background, for places and trip recording), motion and other sensors, step count, contacts (one you pick, or several you tick), calendar, health data through Health Connect, Bluetooth devices, NFC tags, notifications and the clipboard. Umade asks you before each app uses each of these, and you can turn access off in the app's menu at any time. Umade itself doesn't send this data anywhere: it goes only to the app you allowed, on your phone.

Google's code scanner

When you or an app scan a QR code or barcode, Umade opens Google's code scanner, part of Google Play services. Google collects diagnostics about how the scanner runs: details of the phone such as its model and Android version, Umade's name and version, an identifier, timings, settings and error codes, and, while the scanner zooms, where in the picture it found the code. This goes to Google, not to Umade. Google describes it at developers.google.com/ml-kit/android-data-disclosure. Umade has no analytics of its own.

An app you run can send data to websites and services, but only ones you allow it to connect to. What those services do with it is governed by their own policies.

Health Connect

When you allow an app to use health data, Umade reads or writes only the kinds of data you choose in Health Connect, and only to provide that app's features to you. Umade does not use health data for advertising, does not sell it, and does not transfer it to anyone, except to sites you have allowed that app to connect to, at your direction. You can revoke access in Health Connect or in Umade at any time.

Location

When you allow it, Umade collects location data to enable places (alerts when you arrive at or leave a place) and trip recording for the apps you choose, even when the app is closed or not in use. Location stays on your phone; Android shows a notification while a trip is being recorded.

Connecting Claude

If you connect Claude to Umade, Umade's relay service (hosted on Cloudflare) stores a random ID for your phone, a hashed secret, the Claude connections you approved, and apps sent to your phone until your phone downloads them (at most seven days). It doesn't store your name, email address, location or the data your apps save. "Forget this phone" in Umade's About screen deletes this.

Shared rooms

Some apps let you share data with other people's copies of the same app, for example a family shopping list. Umade asks before an app first does this. What the app puts in a room is stored by Umade's relay (on Cloudflare) so everyone in the room gets it, along with the display name the app gives you there. Anyone who has a room's code can see and change what's in it. A room and everything in it is deleted after 90 days without use. Umade doesn't read, sell or share room contents.

Signing in to other services

An app can ask you to sign in to another service (for example "Sign in with Google"). The sign-in page opens in your browser, and the result passes through a page on Umade's relay straight back to the app on your phone. The relay doesn't store or log it.

Libraries for offline use

When an app uses code or fonts from public library sites (such as unpkg.com, jsDelivr or Google Fonts), Umade keeps a copy on your phone so the app also works offline. These requests are made the same way the app would make them; no data about you is added.

Backups

You can save all your apps and their data to a file and restore it on another phone. If Android backup is on, Android also includes Umade's apps and data in your phone's backup (encrypted by Google). API keys typed into apps' settings can be part of that backup; your Claude connection is not.

Google Drive and GitHub

If you connect Google Drive or GitHub to add apps, Umade keeps the sign-in on your phone and uses it only to list and download the files you pick. You can disconnect at any time.

Deleting your data

Most of what Umade keeps is only on your phone, so you delete it there:

• One app and everything it saved: delete the app in Umade. Its data, keys and scheduled jobs go with it.
• Everything on your phone: uninstall Umade.
• What Umade's relay keeps, if you connected Claude (your phone's random ID, a hashed secret, your Claude connections and apps waiting to arrive): in Umade, open Settings and tap Forget this phone on Umade's relay. It's deleted right away. Do this before you uninstall Umade.

Apps waiting to arrive are deleted on their own after seven days. Your phone's random ID and hashed secret aren't linked to your name, email address or anything else about you. Diagnostics sent by Google's code scanner are kept by Google under its own policies; Umade can't reach them. For anything else, write to hello@getumade.com.

Children

Umade isn't directed at children under 13.

Changes and contact

Umade is made by Thru Ventures LLC. If this policy changes, the updated version will be posted here. Questions: hello@getumade.com.