Privacy Policy

Who we are

Suvii ("we", "us") makes the Suvii app and this website, suvii.app. If you have a question about privacy or want to use any of your rights, email support@suvii.app.

What the app stores, and where

When you use Suvii you may enter:

• Your children: name, date of birth and country, and if you choose, sex, blood group, allergies, long-term conditions, time of birth, weeks and weight at birth, and your paediatrician's name and phone number.
• Prescriptions and reports: the date, what it was for, the doctor or clinic, your remarks, a weight and a follow-up date if you add them, and the pages you scan, photograph or import.
• Growth measurements: weight, height and head circumference.
• Vaccination records: date given or skipped, clinic, brand, batch number, notes, next-due dates and photos of the vaccination card.
• App settings, such as reminders, app lock and backup.

All of this is kept on your phone. Records are encrypted with AES-256-GCM, and the key is held in your phone's secure storage (Android Keystore or iOS Keychain). Every page image and card photo is encrypted on its own. Before a page or photo is saved, Suvii removes its location and camera details. The app has no advertising, analytics or tracking code. If you turn on backup, an encrypted copy is also kept on our server (see "Cloud backup").

Scanning documents

On Android, "Scan" uses Google's document scanner, which is part of Google Play services (ML Kit). The scan happens on your phone and the images stay on your phone. Google's scanner sends Google technical metrics about how the scanning feature performs and is used, never your images; Google's terms apply to it. "Photos" and "PDF file" use your phone's own pickers, and the files are read on the phone.

Reminders

Reminders are scheduled on your phone by its operating system. Their text shows a first name and what's coming up, for example "A doctor follow-up for Maya is coming up", never a medicine, a vaccine or a diagnosis.

Asking by voice

Voice questions are optional. They are processed on your phone by Android's on-device speech recognition and, where your phone supports it, Google's on-device Gemini Nano model. Suvii doesn't send your voice or words anywhere and doesn't keep recordings. These are features of your phone, so your phone maker's and Google's terms also apply to them.

App lock

If you turn on app lock, your phone checks your fingerprint, face or PIN. Suvii only learns whether the unlock worked. It never sees or stores biometric data.

Cloud backup

Backup is free and off until you turn it on. When it is on, your records, page images and card photos are encrypted on your phone before they're uploaded. Our server stores only this encrypted data, and we cannot read it. You don't need an account, an email address or a phone number.

Your recovery key

Suvii shows your recovery key once, when you turn backup on. We don't keep a copy and it is never sent to us: your phone sends only a one-way value worked out from it, which lets a new phone find your backup. The key that encrypts your data is uploaded only after it has been sealed with your recovery key. Anyone who has your recovery key can restore your backup, so keep it private. If you lose it, we can't recover your backup for you.

What our server can see

Our server can't read your records. Like any online service, it does see some facts about your backup:

• your IP address and the times your phone connects;
• how many records and pages the backup holds, roughly how big they are, and how often they change;
• when a backup is restored, and when its recovery key is changed (including which backup replaced which).

We use IP addresses to deliver the service and to stop abuse, such as too many new backups from one network. Counters tied to an IP address are deleted within an hour, and our server doesn't keep request logs. The server runs on Cloudflare (Workers, Durable Objects and R2 storage), which also processes IP addresses to run and protect its network under its own privacy policy. Cloudflare's servers may be in a different country from yours.

How long we keep it

We keep your backup until you delete it ("Turn off and delete backup" in Settings, or "Delete everything" with "Also delete my cloud backup" ticked), or until no phone has used it for 2 years, when it is deleted automatically. After a backup is deleted, a copy can remain in Cloudflare's storage history for up to 30 days before it is gone for good.

More than one phone

If you restore your backup on another phone, for example your partner's, both phones back up to it. If you make a new recovery key, the other phone stops backing up until it is restored with the new key.

Things you choose to share

You can create a PDF of prescriptions or a vaccination record, or a JSON export, and share it, for example with a doctor. Once you send a file outside the app, it is handled by the app or person you shared it with.

Links to official schedule sources and to this website open in your browser.

Purchases

Lifetime is bought through Google Play or the App Store. The store handles payment. We receive which purchases your store account owns, never your card or bank details.

Children

Suvii is for parents, guardians and other adult caregivers. Children don't use the app themselves. Information about a child is entered by an adult and stays on that adult's phone, and in their encrypted backup if they turn backup on. We don't profile, track or advertise to anyone, including children.

Your choices and rights

• See and correct: everything Suvii stores is in the app, where you can view and edit it.
• Export: share your prescriptions as a PDF, or download all your data as a JSON file, from Settings.
• Delete from your phone: "Delete everything" in Settings erases all data and its encryption keys. Uninstalling the app also removes its data from your phone.
• Delete your backup: "Turn off and delete backup" in Settings, or tick "Also delete my cloud backup" when you delete everything. Uninstalling does not delete the backup; it is deleted after 2 years without use. Without your phone, restore the backup on another phone with your recovery key and delete it there.

Depending on where you live (for example under the GDPR, UK GDPR or India's Digital Personal Data Protection Act), you may have rights to access, correct, delete or move your personal data, and to complain to your data protection authority. Because your records are on your phone, you can do most of this yourself in the app. We can't read your backup or tell whose it is, so we can't find it for you; you can delete it as described above. For anything else, email support@suvii.app.

Security

Encryption on the phone protects your records if someone gets hold of the stored files, and encryption before upload protects your backup on our server. Please also keep your phone protected with a screen lock and your recovery key somewhere safe. No system is perfectly secure; if we ever learn of a problem that affects your data, we will tell you as the law requires.

This website

suvii.app doesn't use cookies, analytics or ads.

• The site is hosted by Cloudflare, which processes your IP address and basic request details to deliver and protect it.
• To display the page, your browser loads fonts from Google Fonts, icons from Iconify, and code and map data from jsDelivr. Those services receive your IP address and browser details when your browser fetches these files.

Changes to this policy

If we change this policy, we'll update the date at the top. If a change affects how your data is handled, we'll also tell you in the app before it applies.

Contact

Email support@suvii.app.