Privacy

Last updated: November 7, 2026

UmAh is built so that your speech never leaves your device. This website counts visits without cookies, and sets one analytics cookie only if you accept it.

The apps

What UmAh does with audio

• The Mac app listens to your chosen microphone only while listening is on (pause any time from the menu bar). The iPhone app listens only while you are recording a meeting you started.
• Audio is transcribed entirely on the device with a bundled open-source speech model (whisper.cpp). No audio, transcript or statistic is uploaded, streamed or shared.
• The Mac app processes audio in memory in short rolling windows and discards it; it does not record, save or export audio files. With System Audio Recording allowed, it also reads what the Mac is playing, only to tell the other party's voice from yours, and discards that too.
• The iPhone app keeps a recording on the phone while it builds the report; the report (counts, pace, timing, and for Pro the transcript) stays on the phone. Voice enrollment stores a small numeric profile of your voice on the phone, used only to tell your words from other people's.

What the apps store

• Session summaries, counts and pace, are stored on the device for History and Trends: on the Mac in Application Support, on the iPhone in the app's own storage. They never leave the device.
• Settings, such as the pace band or the panel's opacity, are stored in the device's preferences.

What the apps send over the network

• Nothing during normal use. The Mac app makes no network request while listening; the iPhone app makes none while recording or building a report.
• Optional speech-model downloads on the Mac (choosing a different accuracy tier) fetch model files from a public download host; no personal data is sent.
• UmAh Pro on the Mac is a purchase made in your browser and checked through RevenueCat, which stores a random identifier for your copy of the app and the purchase it holds. UmAh Pro on the iPhone is an App Store purchase, handled by Apple. When the Mac app's update check is enabled, it fetches a small file from umah.app and sends the app version and Sparkle version, as any web request does.
• If this ever changes, it will be disclosed here first, it will not include audio or transcripts, and anything optional will be opt-in.

Permissions

Microphone: required to hear you. The system asks for your consent before UmAh can use any microphone, and you can revoke it in System Settings or Settings › Privacy & Security › Microphone. System Audio Recording (Mac, optional): lets UmAh hear what the Mac is playing so it can ignore the other people on your call. Without it, everything the microphone hears counts as you.

Website and cookies

We count visits to this website with PostHog, an analytics service in the United States, so we know how many people read these pages and which ones. The count is all we use it for.

What a visit sends. When a page loads, your browser sends PostHog one page view: the page's address and title, the address of the page that linked you here if there was one, your browser and operating system, your screen size, your language, and your time zone. PostHog's server receives your IP address, the way any server does; we tell it not to work out a location from the address, so no country, region or city is kept with your visit. Until you accept cookies, PostHog has no way to recognize your browser: its server turns the address, your browser type and the site into a hash that changes every day, so your visits on one day count as one visitor and tomorrow you look like someone new. Nothing is written to your device for this.

Until you choose, nothing is stored on your device. On your first visit, a bar at the bottom of the page asks about cookies. The page stays readable with the bar there, and ignoring or closing it changes nothing: no cookie, and visits keep being counted without one. When you choose Accept analytics cookies or Reject, we keep your choice in one small cookie, umah_consent (the choice, the version of this notice and the date), set for umah.app for a year, so the bar doesn't come back on every page. Storing your choice needs no consent; your browser's local storage keeps a copy. We ask again after 12 months.

The analytics cookie. If you accept, PostHog sets one cookie on umah.app for one year (its name is ph_, then our project's public key, then _posthog). It holds a random ID for your browser and a session ID, so page views from the same browser count as one returning visitor rather than a new one each day; the analytics library keeps a copy in your browser's local storage, and session-only entries that end when you close the tab. The cookie is never used to show you ads, it is sent to no one but PostHog, and no other company can read it. If you reject, no cookie is set, and any analytics cookie already there is deleted, with its copies.

Changing your mind. Your Privacy Choices at the bottom of every page opens the same bar again, so you can withdraw your consent, or give it, whenever you like, as easily as the first time.

Global Privacy Control. If your browser sends the Global Privacy Control signal (or the older Do Not Track setting), we treat it as Reject: visits are counted without cookies, the bar doesn't appear, and the footer link shows you where you stand. We don't sell personal information or share it for cross-context behavioral advertising, so the signal asks us for nothing we weren't already doing; we honor it anyway, everywhere.

In the European Economic Area, the United Kingdom and Switzerland. The analytics cookie is set only with your consent, which the bar asks for and the footer link lets you withdraw at any time. Counting visits without cookies rests on our legitimate interest in knowing how many people read these pages and which ones: it stores nothing on your device, builds no profile, and can't follow you from one day to the next. You have the right to object to it; email [email protected]. Because the daily hash never names you, there is nothing in the count we could find and delete afterwards; a content blocker that blocks the two PostHog addresses (us.i.posthog.com and us-assets.i.posthog.com) stops the counting entirely, and the pages work without it.

California. This is our notice at collection for the website. We collect two categories of personal information: identifiers (your IP address, which PostHog's server receives, and, if you accept cookies, the random browser ID in the cookie) and internet or other electronic network activity (the page views described above). We use them for one purpose, audience measurement: counting visits and seeing which pages are read. We don't sell this information and we don't share it for cross-context behavioral advertising, and we keep it for the time stated under How long below. You have the right to know what we collect about you and to delete it, and to do so without being treated differently; email [email protected]. A page view counted without cookies holds nothing that identifies you, so a request can only reach what the cookie's browser ID connects, and you can delete that yourself by choosing Reject.

How long. PostHog keeps the website's page views for one year, then deletes them. The daily hash is never stored as such and cannot be recomputed after the day ends. Your cookie choice lasts a year on your device, and so does the analytics cookie if you accepted one.

PostHog's role. PostHog, Inc., in the United States, stores and charts the page views for us as our service provider and processor under its data processing agreement, and may use them for nothing of its own.

The launch list

If you ask to be told when the apps ship, we keep the email address you enter and the date you joined, and nothing else. We use it only for that one email. It is stored with our hosting provider, Cloudflare. To be taken off the list, email [email protected].

Contact

Questions about privacy: [email protected].