Your code stays
on your machine.

The Umbra Agent runs entirely on your machine as a local daemon and CLI. We don't operate a backend that your code, files, or prompts pass through, and we don't collect telemetry from the agent.

The only network calls Umbra makes are the ones you configure — direct, from your machine, to the AI provider (and optional tools) you choose.

When you run a task, the relevant context — file contents, project structure, terminal output, and your prompts — is sent directly from your machine to the model provider you've configured (OpenAI, Anthropic, Mistral, a local Ollama/LM Studio instance, or OpenCode Zen). Umbra does not proxy, log, or store this exchange on any server we operate.

Your provider API keys are stored locally in ~/.umbra/providers.json and are never transmitted to us.

If you use the default OpenCode Zen free tier, requests pass through that third-party gateway under its own terms — switch to BYOK (bring your own key) at any time to call providers directly instead.

Optional web-search tools (Brave, Tavily, Jina) send your search query to the respective provider, but only when you've supplied an API key and enabled that tool yourself.

Umbra's memory layer generates embeddings on-device for local recall of past sessions — no data leaves your machine for this step, and the resulting vectors are stored in your local database.

Everything Umbra stores lives under ~/.umbra/ on your machine: provider profiles and API keys (providers.json), the memory / vector database (main.sqlite), a token and cost log (usage.jsonl), and permission rules (permissions.json, trusted-paths.json).

None of this is uploaded anywhere. Deleting the ~/.umbra directory removes it completely.

umbra.expert is a static site with no account system. We use Cloudflare Web Analytics to understand traffic — a privacy-first tool that doesn't use cookies, local storage, or any persistent identifiers, and can't track you across other sites. It only reports aggregate, anonymized metrics: page views, referrers, country, browser/device type, and page performance.

The only way we receive information that identifies you is if you choose to email us.

This policy may be updated as Umbra evolves. Check back here for the current version.

Questions? Reach out at [email protected].