Privacy Policy

Effective 12 November 2026

Notuvi has no accounts, servers, ads or analytics. What you enter stays on your device.

1. Who is responsible

Notuvi is developed by Michał Kurek, who is the data controller for the processing described in section 6 (email correspondence). Contact for all privacy matters: kontakt@notuvi.com.

We do not process the records you enter in the app and have no access to them. Only you manage them, on your own device.

2. What you store in the app

Notuvi keeps the health history of a child or another person you care for. You can store:

• a profile: first and last name, date of birth and, optionally, a Polish national ID number (PESEL);
• medications and dosing history, allergies, conditions and diagnoses;
• vaccinations, measurements (weight, height), visits, tests, procedures, hospital stays and notes;
• details of doctors and clinics (specialists) you see;
• documents: photos and PDF files attached to records;
• reminder dates and app settings.

This is health data, a special category of personal data. That is why it stays on your device and the app never sends it anywhere.

3. How it is protected

• Records are kept in a local database encrypted with SQLCipher. The encryption key is random and stored in this device's Keychain; it does not move to other devices.
• Attachments (photos and PDFs) are files in the app's private folder, protected by iOS/iPadOS security features. Notuvi does not encrypt them further.
• You can turn on an app lock: Face ID / Touch ID with your device passcode, or a 4-digit PIN. The app never sees your biometric data — the system only tells it whether authentication succeeded. The PIN is kept in the Keychain only as a cryptographic hash.
• With the lock on, the app's preview in the app switcher is covered.

4. Permissions

• Camera — only to photograph documents you want to add.
• Photos — only to add the photos you pick.
• Files — only to add the PDF you choose.
• Face ID — only to unlock the app, if you turn the lock on.
• Notifications — for prescription and next-dose vaccination reminders. Reminders are scheduled locally on the device; no push server is used.

You can revoke any permission in system Settings. The rest of the app keeps working.

5. Sharing you start

The app can create a PDF report for a doctor or share a chosen document. The file is created on the device and you decide in the system share sheet where to send or save it (e.g. Mail, Messages, Files, a printer). Temporary files are removed from the app's folder. Copies you save or send outside the app are governed by the service you choose and are beyond our control.

6. Feedback and email

“Report a bug or share an idea” prepares a message in your mail app. Nothing is sent automatically — you send the message yourself. If you do (or contact us any other way), we receive:

• your email address and any signature in the message;
• the message text;
• if you tick “Include technical information”: app version and build number, operating system name and version, and app language. We never attach medical data, device identifiers or logs.

Please do not include medical data, names or ID numbers in your message.

• Purpose: replying to you, fixing bugs and improving the app.
• Legal basis: our legitimate interest in handling correspondence and improving the app (Art. 6(1)(f) GDPR).
• Retention: as long as needed to handle your message, and no longer than 24 months after the last message, unless you ask us to delete it sooner.
• Recipients: our mailbox is hosted by VH.pl, a Polish hosting provider. We do not share your messages with anyone else.

7. Apple

You download the app from the App Store, and Apple processes related data under its own privacy policy. If you agree in iOS settings to share analytics with app developers, Apple may send us anonymised crash reports and usage statistics. They do not contain anything you entered in Notuvi.

An iCloud or computer backup may include the app's files but not the database encryption key. After restoring a backup on another device, Notuvi records therefore cannot be read. Notuvi offers no sync or import.

8. Children

Notuvi is meant for adults — parents and caregivers keeping a child's health records. The caregiver enters and controls the child's data; it never reaches us.

9. Deleting data

• In the app: More → Delete local data. This removes all records, attachments, temporary reports and scheduled reminders.
• Deleting the app from the device also removes its database and files.
• We hold no copy of your records, so we cannot restore them. Keep the documents you need beforehand.
• To delete our correspondence with you, write to the address in section 1.

10. Your rights

For data we have received (section 6), you have the right to access, rectify and erase it, to restrict its processing, to data portability and to object. To exercise them, write to the address in section 1.

You may also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or with the authority in your country of residence.

11. This website

This website uses no cookies, analytics, third-party scripts or fonts. It is hosted by VH.pl, a Polish hosting provider, which may briefly process technical connection data (such as your IP address) to deliver the site and protect it from abuse.

12. Changes

If the app starts handling data differently, we will update this policy before releasing that version and change the date at the top.