SONYA · Privacy

How SONYA handles data

How the current app and this website work. Updated October 29, 2026.

Operator: ИП Серебряков Олег Александрович · Russia

Local journals in version 1.39

Journals on your device

Cycle entries, symptoms, moods, pregnancy and recovery records, child profiles, care events, selected photos and forecasts are stored locally. This version has no SONYA account, advertising, third-party analytics, server sync or journal transmission to a language model. It uses iOS file protection; no separate end-to-end encryption is claimed.

Backups

The personal cycle/pregnancy journal, its history and drafts are excluded from system backups. A separate personal export transfers saved records and history. Unfinished drafts stay on this device only; save them before transferring. Child storage may be included in system backups according to your iOS settings. App Store availability does not create a SONYA cloud backup. Exported JSON/CSV/PDF files have no separate encryption.

System features

You select individual photos through the system picker. The widget receives the child's name and derived feeding/sleep information. Live Activity is opt-in and can show the name and timer on the lock screen. iOS delivers notifications; details are hidden by default. External resources open at your request and follow the respective websites' policies.

Sharing with family

You choose child-care categories and share a family file. It excludes the personal women's journal, notes, photos and individual medical plans. This is a separate copy, with no automatic co-editing. A sent file cannot be revoked. Received family copies are stored separately from your own journal.

Deletion

Deleting a child entry retains history and a technical deletion record for Undo and protection against repeated imports. Use Erase family data to remove current child records from the app; this preserves the personal women's journal. Irrecoverable destruction of database remnants and free storage blocks is not guaranteed. Personal records, history and drafts are erased separately in the personal section. Delete exported files and system backups where they are stored. Removing the app does not remove files already shared.

Your device and support

You can enable device-owner authentication for the personal section. It does not protect files already exported. Support cannot access your local journal; describe the app version, device and steps to reproduce an issue. Do not send intimate records, child photos or medical documents.

Separate test online workspace

An optional family sign-in through Supabase, with email codes sent through Forward Email, is being prepared for the next test build. It uses a separate test project in Ireland: demonstration profiles only for now. Signing in sends an email address; copying selected child-care events, name and birth date requires separate confirmation. The woman’s personal journal, photos, notes and medical plan are excluded. The local journal does not automatically sync with this workspace. Signing out or uninstalling does not delete the server account; contact the operator through support to delete test data. This is not a finished production cloud service. Visiting this website does not send journals to Supabase.

This website and support

The website introduces the app and provides help. There is no registration, health-record form, advertising tracker, third-party analytics or remote font. Cloudflare hosts the website: network requests, IP addresses and technical browser information are processed by the hosting infrastructure to deliver pages and protect the connection. This does not transmit SONYA journals. The provider's policy is linked below.

If you email us

The operator receives your email address and the message you send. Correspondence is used to respond, investigate the issue and handle necessary follow-up; retention depends on that purpose and applicable obligations. A mail provider handles the messages. Do not include health information or photos: a technical request needs only the device, version and issue description. For questions about access, correction or deletion of correspondence data, use the contact below.

Control and deletion

Use the app to access and erase local records. Support cannot remotely erase your journals, system backups or files you already shared with another person. For a data-handling request, describe the website or support interaction concerned without attaching your full journal.

Cloudflare privacy policy