Privacy policy

Effective 13 November 2026

This policy explains how Suwa, a clinic management system, and its companion backup app, Suwa Backup, handle data. It is written in plain language; if something is unclear, write to thusalapi@gmail.com.

Who is responsible for the data

Suwa is operated by Thusala Piyarisi (Sri Lanka). Each clinic that uses Suwa decides what patient and billing information it records and is responsible for that information. Suwa stores it on the clinic's behalf and does not use it for any other purpose.

What Suwa stores

• Clinic records entered by staff: patient details (name, phone number, date of birth or age, optional ID number), lab reports and results, bills and payments.
• Staff accounts: name, email address, role, and a salted password hash. Passwords are never stored in readable form.
• Security records: sign-in attempts (email and network address) to block repeated failed logins, and an audit log of changes.

Suwa is not a public website: it has no advertising, no analytics trackers, and no public sign-up. It is reachable only by a clinic's own staff over a private network.

How data is protected

• Access is limited to authorised staff devices over an encrypted private network.
• Data is stored on a private server that accepts no connections from the open internet.
• Database backups are encrypted (AES-256-GCM) before they leave the server.

Suwa Backup and Google Drive

Suwa Backup is the small app that copies each night's encrypted database backup to a Google Drive folder chosen by the account holder.

• It asks for one Google permission only: https://www.googleapis.com/auth/drive.file. This lets the app see and manage only the files it created itself. It cannot see any other file in the Drive.
• It uploads encrypted backup files to the account holder's own Drive and reads them back only to restore the system. The files cannot be read without a separate encryption key that is never stored in Drive.
• It does not read the account holder's email, contacts, or any other Google data.
• Google user data obtained through this permission is not shared with anyone, not sold, not used for advertising, and not used to train any model. Suwa's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
• The account holder can revoke access at any time at myaccount.google.com/permissions and delete the backup folder from Drive.

Sharing

Suwa does not sell data and does not share it with third parties, except the infrastructure providers that host it (a cloud server and, for backups, Google Drive) and where the law requires it.

Retention and deletion

Clinic records are kept for as long as the clinic uses Suwa. Backups are kept for a short rolling period (the most recent seven nightly copies on the server). A clinic can ask for its data to be exported or deleted by writing to the address below.

Your rights

If you are a patient and want to see, correct or remove information a clinic holds about you, please contact that clinic first. You may also write to the address below and we will pass your request on to the clinic.

Changes

If this policy changes, the new version will be posted on this page with a new effective date.

Contact

Thusala Piyarisi, Sri Lanka · thusalapi@gmail.com