← Back to home

Privacy Policy

Last updated: July 12, 2026

Undra is local-first software made by Butterstorm LLC. Your data stays on your device by default. This website does not run analytics or behavioral tracking, and the Undra app does not send tracking data or crash reports by default. The app does check for updates automatically, which you can turn off in Settings.

1) Summary

  • Local-first by design: your content stays on your device.
  • No website analytics or behavioral tracking.
  • No app tracking or crash reports by default.
  • If you email support, we use your message only to help you.
  • AI features (if enabled) send only the content you choose to your AI provider to generate a response.

2) Data we collect

  • Website: we do not run analytics or behavioral tracking. We do not use tracking pixels or behavioral profiling.
  • Website: when you request a page, our web server (or hosting provider) may process standard request data needed to deliver the site and keep it reliable (for example, IP address, user agent, and requested URL). We do not use this to build advertising profiles.
  • Website: our hosting/CDN provider (Cloudflare) gives us aggregate traffic statistics (for example total visits, top pages, and countries) derived from serving the site. These statistics do not use cookies and do not identify or track you across sites.
  • Website: we do not sell personal information and we do not use advertising trackers.
  • Contact form: if you use the contact form on this website, we receive the name, the email address (only if you choose to provide one), the topic, and the message you submit, so we can reply. It is delivered to our support inbox.
  • Spam protection: the contact form uses Cloudflare Turnstile to tell humans from bots. Turnstile processes limited technical signals (such as your IP address and basic browser information) for that purpose only. It does not use tracking cookies and is not used to profile you across sites.
  • For details on what Turnstile collects, see Cloudflare's Turnstile Privacy Policy.
  • App: Undra is designed to run locally. We do not receive your notes, tasks, canvases, or files by default.
  • App: the Undra app does not send tracking data or crash reports by default.
  • Optional features (if enabled): if you choose to use features that communicate with our servers (such as update checks, or fetching the current list of supported AI models), we will receive the network requests necessary to provide that feature.

3) AI features (optional)

  • If you enable AI features, the app may send selected content to your connected AI provider (for example Claude, OpenAI/Codex, or Cursor, or a local model via Ollama or LM Studio that runs on your machine) to generate results.
  • Provider authentication is stored locally on your device, encrypted at rest using OS-backed encryption where available.
  • Chat and agents: when you chat with the built-in AI, it can read content from your workspace and from any folders you choose to connect, and what it reads may be sent to your AI provider to generate the response. It cannot see folders you have not connected. Images you attach in chat are sent to your provider as part of that request.
  • Notes text AI: by default, only the text you select is sent. If you enable whole-note context, the full note body may be sent as read-only context for that request.
  • Canvas image AI: image AI is off by default. If you enable it, the app may upload the image(s) you select for actions like OCR, describe, stylize, or background removal (with confirmations). Outputs are created as new assets and do not overwrite the original.
  • Third-party processing: your AI provider processes these requests under its own terms and policies. We do not control how third parties log or retain data.
  • Tip: avoid including secrets (passwords, API keys, private keys) in prompts or context you send to an AI provider.

4) Updates

  • By default, the app periodically contacts Undra update servers to check for and download newer versions, so you stay current with fixes and security patches.
  • You can turn automatic updates off in Settings; with them off, the app only contacts update servers when you check manually.
  • Requests may include basic technical information needed to deliver updates (for example, app version and operating system).
  • We do not use update checks for behavioral tracking or to identify you across sessions.

5) Email and support

  • If you contact us by email, we use your message only to respond and provide support.
  • In-app feedback: if you use the Send feedback button inside the app, we receive your message along with basic technical details (app version and operating system) so we can diagnose issues. It is delivered to our support system and used only to help you.
  • Email may include any information you choose to share; please avoid sending sensitive data you do not want stored in email.
  • We only receive what you choose to send us (for example, your message and any attachments).
  • We may keep support emails as needed to resolve issues and maintain continuity of support conversations.
  • We do not use support emails for advertising profiling.

6) Your rights, retention, and children

  • You can email us to ask what contact or support information we hold about you, to correct it, or to have it deleted, and we will honor reasonable requests.
  • We keep contact-form and support messages only as long as needed to help you and maintain continuity of support, generally no more than 24 months, unless you ask us to delete them sooner.
  • Undra is not directed to children under 13, and we do not knowingly collect personal information from them.

7) Changes

  • If this policy changes, the version published on this page is the current version.

8) Contact

9) External links

  • If you follow a link to a third-party site, that site has its own policies. We are not responsible for third-party privacy practices.