The short version:
- Your mail lives on a mail server we own and run — not on a third party's platform.
- We do not read, scan, or mine your mail for advertising or profiling. Your inbox is not an advertising asset.
- Your mail is not end-to-end encrypted at rest, and we say so plainly rather than implying otherwise.
1. What this service holds
- Your handle — the
@ummah.emailname you claimed, which is the same account as your UmmahPass account. - If you use free forwarding — the address you asked us to forward to, so mail sent to your handle reaches the inbox you already use. Nothing is stored in a mailbox here.
- If you have a mailbox with us — your messages, folders, and attachments, stored on our mail server so we can deliver them to you.
- Mail-server logs — connection and delivery records, kept for a limited period so we can fight spam and abuse and diagnose delivery problems.
2. Encryption, stated honestly
- Mail travels encrypted in transit (TLS) between servers and to your devices.
- Mail is not end-to-end encrypted at rest. Like almost every email provider on earth, including the big ones, messages are stored in a form our systems can read — that is what makes delivery, spam filtering, and search work.
- The difference is what we do with that access: we do not scan, mine, or analyze your mail for advertising or profiling, and staff access to stored mail is limited to what is required to run the service — delivery, spam filtering, or a support problem you have asked us to look at.
3. What these pages collect
The public ummah.email pages — this one, the homepage, and the signup flow — run UMG's own first-party activity system, which links what you do here to your UmmahPass profile across our sites. It is on by default, it is never sold and never shared outside Ummah Media Group, and you can switch it off at any time in your UmmahPass privacy settings — which deletes the profile you already have, not just future collection.
The webmail client at webmail.ummah.email does not run it. Reading your mail is not measured, and it never feeds a profile. We also measure page visits with Matomo running on our own servers — not Google, not Meta, not any analytics company.
4. One commitment, quoted exactly
"We never read or scan your email to target ads at you. Your inbox is not an advertising asset."
— quoted verbatim from section 2, What we will NEVER do. Every commitment in that list binds ummah.email too.
ummah.email is part of the UmmahCity ecosystem and runs on a shared UmmahPass account. This site loads the UmmahPass behavioral tracking script, which links your activity across UMG sites to a profile you can turn off and erase at any time in your UmmahPass privacy settings.
Everything ecosystem-wide - the full description of that system and its off-switch, our self-hosted analytics, payments, security, data deletion, and the complete list of what we will never do - lives in one canonical policy at ummah.city/privacy, which governs this site too. This page covers only what is specific to ummah.email; the canonical policy and this page's site-specific facts together are the whole truth.
5. Contact
Ummah Media Group LLC
California, United States
Mail support: salaam@ummah.email
Privacy: privacy@ummahpass.io
For the full public infrastructure audit, see /sovereignty. For our terms of service, see /terms.