Hebra privacy policy

Last updated: October 4, 2026.

Who is responsible

Hebra is published by David Velasco. Contact: lumbre@fodaveg.net.

What data Hebra handles

Without sync (default). Your notes, folders, tags, attachments and settings are stored only on your device (in the web app, in your browser's storage). Hebra does not send your notes to any server, uses no analytics or advertising, does not track you and includes no third-party measurement SDK. Diagnostics are a local log file that is not sent anywhere.

With sync (optional). If you connect a Lumbre account and link the library, Hebra encrypts notes and attachments on your device (AES-GCM) before sending them to the Lumbre server. The server sees your account and authorization credentials, your IP address and the time and frequency of requests, opaque library, device and record identifiers, the size of each encrypted object and, when another device asks for access, that device's name and platform. It does not see titles, text, tags, folder or file names, or attachment contents. When you add a device you trust the server to deliver the key: a malicious server could tamper with that linking.

Locked notes. The body of a locked note is stored encrypted with your notes password. The title and metadata stay visible. If you forget the password it cannot be recovered.

App lock. On Apple platforms, Hebra may ask for Face ID, Touch ID or the device passcode to open the app or locked notes. The system handles it: Hebra neither receives nor stores biometric data.

Pasting a link. In the native apps, when you paste a web address on its own in the editor, the app downloads that page from your device to read its title and, if you turn on a link preview, its description and image. The requests go straight to that page (and to the address of its image, only if it is https), do not pass through Hebra or Lumbre and are not logged. The page sees your IP address, as if you opened the link. The web app makes no request: the link stays as you pasted it.

Ask your notes. It runs on your device with Apple Intelligence and the local Spotlight index. Neither the question, the notes nor the answer leave the device.

Plugins. Third-party plugins are off by default. A plugin may ask for access to your notes or the network; Hebra shows that and asks for consent before installing it. Data a plugin handles with its own servers depends on that plugin. When you open Settings > Plugins, Hebra reads the public plugin list from GitHub (raw.githubusercontent.com), which sees your IP address; no note or library data is sent.

Web server. The files of the web app (app.hebra.pro) and of this site are served from a server that, like any web server, receives your IP address when it delivers them. Hebra uses no tracking cookies and no analytics.

Device permissions

Hebra does not ask for location, contacts or access to your full photo library (photos are picked with the system picker, which needs no permission). On iPhone and iPad it asks for the camera and microphone only when you choose to take a photo or record a video to attach to a note; the result is saved as one more attachment, handled like any other and with no new data collected. It may ask permission to show system notifications (for example, when another of your devices asks for sync access) and, on Apple platforms, to use Face ID.

Retention and deletion

You control local notes; deleting the app deletes them. To remove the synced library, write to lumbre@fodaveg.net. From Settings > Synchronization you can also replace the server library with the one on this device, which deletes the previous one. Without your recovery code or a linked device, neither Hebra nor Lumbre can recover the key.

Your rights

You can request access, rectification, erasure, restriction, portability and objection by writing to lumbre@fodaveg.net. We will answer within one month. You may also complain to your data protection authority.

Changes

If this policy changes, this page and its date will be updated.