Version 1.0 · Effective today
Your health information is yours. We will never sell it. We will never trade it. We will never use it to target ads at you or anyone else. We collect only what we need to make Umuchi work for you, and we protect it as carefully as we know how.
This Privacy Policy explains what information we collect, why we collect it, how we use it, who we share it with, how long we keep it, and what rights you have. By using Umuchi, you agree to this Privacy Policy.
When you create an account and use Umuchi, you may give us:
When you use Umuchi, we automatically collect:
We do not collect, and never will collect:
We use the information you give us and the information we collect automatically only to:
We do not use your health information to train artificial intelligence models. We do not share your health information with advertisers or data brokers. We do not analyze your data to build a profile of you for commercial purposes outside of operating Umuchi.
We only share your information with the limited service providers we need to operate Umuchi, and only the minimum necessary for them to do their job. These include:
We do not sell, rent, or lease your information to any third party. We do not share your information for any third party's own marketing purposes.
We may share information when required by law, such as in response to a valid subpoena or court order. If we receive such a request, we will only provide what we are legally required to provide, and where the law allows, we will attempt to notify you so you can object before we disclose.
If Umuchi is ever acquired by or merged with another company, your information may be transferred as part of that transaction. In that case, we will notify you in advance and the receiving company will be bound by privacy commitments at least as protective as this Policy.
If you invite another user to share access to a profile you manage (Family Mode), the person you invite will be able to see and edit information in that profile. They are bound by their own agreement to these Terms and Privacy Policy. You may remove their access at any time through Settings.
We use industry-standard security practices, including:
No system is perfectly secure. While we work hard to protect your information, we cannot guarantee absolute security. If we ever discover a data breach affecting your information, we will notify you promptly as required by applicable law.
We retain your information for as long as your account is active. When you delete your account, we permanently delete your personal information within 7 days, except:
Precise location coordinates captured during panic events are deleted after 30 days. The fact that a panic event occurred remains in your history.
You have the right to:
You can exercise most of these rights directly through Settings. For anything you cannot do yourself, email contact@umuchi.com and we will respond within 30 days.
Umuchi is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If we learn that we have collected information from a child under 13 without parental consent, we will delete it.
A parent or guardian may manage a profile for a child under 13 within their own account. In that case, the parent or guardian is responsible for ensuring appropriate use and for the accuracy of the information entered.
Umuchi is operated from the United States, and your information is stored on servers in the United States. If you access Umuchi from outside the United States, your information will be transferred to and processed in the United States, which may have data protection laws different from those in your country.
If you are in the European Economic Area, the United Kingdom, or another region with comprehensive data protection laws, you have additional rights under those laws, including the right to lodge a complaint with your local supervisory authority.
Umuchi is a consumer wellness application. It is not a "covered entity" under the U.S. Health Insurance Portability and Accountability Act (HIPAA), and HIPAA generally does not apply to direct-to-consumer wellness apps. However, we treat your health information with care comparable to HIPAA's standards because we believe it deserves that level of protection.
If we ever offer Umuchi to a healthcare provider, employer, insurer, or other entity that would make HIPAA apply, we will execute the required Business Associate Agreements and update this Policy.
We use a small number of cookies and similar technologies that are strictly necessary to keep you signed in and to remember your settings. We do not use advertising cookies or third-party tracking cookies.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you in the app and update the version number and effective date at the top. Your continued use of Umuchi after the changes take effect constitutes acceptance of the updated Policy.
For questions about your privacy, to exercise your rights, or to report a concern, email contact@umuchi.com. We typically respond within 7 days and always within 30 days.
Umuchi sends SMS messages on behalf of you, the account holder, to the trusted contacts you have personally added in the app. This section describes the program in detail so that you, your contacts, and the carriers we work with understand exactly how it operates.
Who sends the messages. Umuchi sends SMS messages through Twilio, our SMS delivery partner. The sending phone number is a verified business number registered to Umuchi.
Who receives the messages. Only trusted contacts you have personally added in the Umuchi app receive SMS messages. We do not send SMS messages to any number that was not added by an account holder. We do not buy or import contact lists.
What the messages contain. SMS messages contain only what is necessary to communicate an emergency. A typical Panic Button SMS contains your display name, an optional short note you typed before sending, and a link to your location if you chose to share it. A typical missed-check-in SMS contains your display name and a request that the recipient check on you. We do not send marketing, promotional, advertising, or commercial messages by SMS. Ever.
When messages are sent. SMS is sent only when you take a deliberate action in the app — pressing and holding the Panic Button for three full seconds, or failing to confirm a Daily Check-In within the window you configured. We do not send SMS on any other schedule.
How recipients opt in. When you add a person as a trusted contact in Umuchi, you are explicitly telling us they have agreed to receive emergency messages from you, sent through Umuchi. You are responsible for obtaining that consent before adding the person. Each contact entry in Umuchi has a separate, off-by-default toggle for each notification type ("Notify on panic", "Notify on missed check-in"). SMS is only sent to a contact for a notification type if you have specifically enabled that toggle for that contact.
How recipients opt out. A recipient can opt out at any time by replying STOP to any Umuchi SMS message. Twilio honors STOP, UNSUBSCRIBE, CANCEL, END, and QUIT automatically and blocks all future SMS from our number to that recipient. They can also ask you, the account holder, to remove them from your contacts list, which you can do in the My People section of the app at any time. Replying HELP returns information on how to contact us.
Message frequency. Frequency is entirely determined by your use of the Panic Button and Daily Check-In features. Most accounts will send no SMS messages in a given month. Heavy use of Daily Check-In could send a few alerts per month if you frequently miss confirming. We do not send any other SMS.
Carrier fees. Standard message and data rates from the recipient's mobile carrier may apply. Umuchi pays for the cost of sending; recipients pay only their carrier's normal rate for receiving an SMS.
Questions about SMS. Email contact@umuchi.com.