Sugabi App Privacy Policy
Version 2026-09-17 · Effective 17 September 2026 · Applies to the Sugabi app (app.sugabi.lk and the Sugabi apps for Android and iOS)
The short version. Your health records live on your own phone. If you sign in with your mobile number, an exact copy is kept on our server so you can restore your records if you lose or change your phone. We never sell data, we show no advertising, and we use no third-party trackers. You can see, export, and permanently delete everything, at any time, from inside the app.
Who we are
The Sugabi app is provided by Sugabi Medicare (Private) Limited (Reg. No. PV 00261546), trading as Sugabi Clinic, No. 560, Mahabage Road, Ragama, Sri Lanka — the data controller under the Personal Data Protection Act, No. 9 of 2022 (PDPA). For anything in this policy, write to developer@sugabi.lk.
What Sugabi collects
If you use Sugabi without signing in
Everything you enter — periods, symptoms, pregnancy details, weights, blood pressure, medicines, checklists, your birth plan — is stored only on your phone. We do not receive it and cannot see it.
If you sign in
- Your mobile number, used only to sign you in with a one-time SMS code and to identify your backup. Sugabi has no passwords. Sign-in codes are stored scrambled (hashed) and expire in five minutes.
- Your health records, as above, copied to our server as your backup and kept in step while you stay signed in. This is health data — “special category” personal data under the PDPA — and we process it only with your explicit consent, which you give when you sign in. We record the date, policy version, and network address of that consent.
- Your name, only if you choose to add it in your profile.
Collected automatically
- Anonymous usage counts — which screens and features are used, in which language and mode. These are tied to a random code created on your phone, never to your number, name, or records, and cannot be traced back to you.
- Technical records needed for security — the network (IP) address of sign-in attempts, used to limit abuse of the SMS code system, and a delivery log of the SMS messages we send.
What we never collect
No location, no contacts, no photos, no advertising identifiers, no data from other apps.
Why, and on what legal basis
- Backup and restore of your health records — your explicit consent (PDPA s.12). You can withdraw it at any time by deleting your account.
- Operating your account (sign-in, SMS codes) — performance of our service to you.
- Security and abuse prevention (rate limits, delivery logs) — our legitimate interest in keeping the service safe.
- Improving Sugabi (anonymous usage counts) — legitimate interest; the data cannot identify you.
Sugabi gives general guidance only and is not a substitute for medical care. Decisions about your health belong with you and your doctor or midwife.
Where your data is kept
On your phone, and — if you sign in — on our web server, which is operated by our hosting provider and currently located outside Sri Lanka. All communication between the app and the server is encrypted (HTTPS/TLS). Health data is never written into server logs.
Who can receive your data
- Notify.lk, our Sri Lankan SMS gateway, receives your mobile number solely to deliver sign-in codes.
- Our hosting provider stores the server and its database on our behalf.
- A clinician you choose. If you create a share link in the app, whoever holds that link can view only the sections you selected, until the link expires (7 days unless you choose otherwise, at most 30). We count views and record the viewer’s network address, and you can revoke a link at any time.
We never sell personal data, never share it for advertising, and use no third-party analytics services. We would disclose data only if the law of Sri Lanka required it.
How long we keep things
| Data | Kept for |
|---|---|
| Your health records (backup) | Until you delete your account — then removed immediately and permanently |
| Sign-in code records | About a day after they expire |
| SMS delivery log | 180 days |
| Sync housekeeping log | Superseded entries removed after 90 days |
| Signed-in device sessions | 30 days after they expire |
| Share links | 30 days after they expire |
| Anonymous usage counts | Kept in anonymous form; cannot be linked to you |
Your rights
Under the PDPA you may access, correct, export, and erase your personal data, withdraw consent, and object to processing. Sugabi builds these rights into the app itself:
- See and correct — every record is visible and editable in the app.
- Export — Settings offers a full backup file of your records.
- Erase — deleting your account in Settings removes your backup, your number, and every server record about you in a single, immediate, irreversible step. This is also how you withdraw consent.
For anything the app cannot do, or to raise a concern, contact us at developer@sugabi.lk — we answer within 21 days as the PDPA requires. You also have the right to complain to Sri Lanka’s Data Protection Authority (dpa.gov.lk).
Security
Encrypted connections everywhere; sign-in by one-time codes rather than passwords; codes stored hashed with strictly limited attempts; sessions held with short-lived, rotating tokens; health data excluded from logs; server access limited to the clinic.
Children
Sugabi is intended for women of reproductive age. If you are under 18, please use Sugabi with the involvement of a parent, guardian, or your healthcare provider.
Changes to this policy
If this policy changes in a way that matters, the app will tell you and ask again for your consent before your backup continues. The version date at the top always shows the current edition.
Looking for how the sugabi.lk website handles data? See the Privacy & Cookie Policy.