SunnoteThe short version
- No account, no sign-in, no ads, no analytics and no tracking tools.
- Your health entries and records are stored only on your device, encrypted.
- The app does not ask for internet access, so it cannot send anything anywhere.
Who is responsible
Sunnote is published by c’aK Apps, based in The Gambia. Contact: ckamilkapp@gmail.com or the contact form.
Data the app stores on your device
To work, Sunnote keeps what you enter: pain, energy and mood entries, tags and notes, medications and dose times, doctor visits, lab results, documents (PDF or photos), diagnoses, allergies, surgeries and vaccines, plus your settings. This is health information. It is stored in an encrypted database in the app's private storage on your phone, and documents are stored encrypted. It is never sent to the developer or to anyone else.
Health Connect
If you choose to connect, Sunnote reads your heart rate, steps and sleep from Health Connect, using read-only permissions that you grant. It summarises them on your phone and shows them next to your entries. Sunnote never writes to Health Connect, never sends this data anywhere, never shares it, and never uses it for advertising. You can change or withdraw access at any time in Health Connect or in the app. Health Connect itself is an Android system service with its own privacy terms.
Reports and sharing
When you make a PDF or CSV report or a health summary, Sunnote builds the file on your phone and hands it to Android's share sheet. You choose which app receives it, and the temporary file is deleted afterwards. Nothing is shared unless you share it.
Encryption and lock
The database is encrypted with a random 256-bit key held in your phone's secure storage (Android Keystore), not next to the data. If you turn on the optional app lock, Sunnote asks for your fingerprint, face or screen lock. If the phone's secure storage is wiped while the files remain, the data cannot be recovered without a backup.
Backups
You can turn on an optional backup protected by your password and a recovery code. Only that encrypted file can be copied by Android's Auto Backup to your Google Account; the live database, keys and settings are excluded. Google cannot read the file without your password. You can also export and restore backups by hand. We cannot recover a lost password or recovery code.
Notifications
If you allow notifications, Sunnote schedules medication reminders locally on your phone, at the times you set, and restores them after the phone restarts. Medication names are hidden on the lock screen by default. There is no push-notification server, and no data is sent anywhere to deliver them.
Permissions
On Android, Sunnote asks to show notifications, to schedule reminders at exact times, to vibrate, to restore reminders after the phone restarts, and to use your fingerprint, face or screen lock for the optional lock. If you connect Health Connect, it asks to read your heart rate, steps and sleep, read-only. It does not ask for internet access. Documents you add are chosen with Android's own picker. It does not ask for access to your contacts, location, camera or microphone.
Children
Sunnote is intended for adults and is not directed at children under 13. Because it collects no personal data, it collects nothing from children either.
Deleting your data
Delete individual entries and records inside the app, or uninstall the app or clear its storage in Android settings to delete everything. The developer holds none of it, so there is nothing to request from us. If Auto Backup is on, an encrypted backup file may remain in your Google Account; you can manage it in your Google account settings. Files you exported stay wherever you saved them until you delete them.
Your rights
Because we do not collect or hold any personal data, there is nothing to access, correct or delete on our side. If you have a question, write to the contact address above.
Changes
If this policy changes, the new version will be posted here with a new effective date. If the app ever starts to collect data or ask for internet access, this page will be updated before that version is released.