Clavio
Privacy policy
Clavio is a record-keeping app for dental clinics. This policy explains what we collect, why, where it lives, who else touches it, and how you get it back or delete it. We've kept it short on purpose; if anything is unclear, write to support@clavio.health.
Clavio is operated by Sohail Abbas, an individual developer based in Bengaluru, Karnataka, India ("we", "us"). We are the data controller for the account and clinic data described below.
What we collect
| Data | Examples | Why |
|---|---|---|
| Account | Email address, a password you choose, the one-time codes we email you | To sign you in and recover your account |
| Clinic profile | Clinic name, country, time zone, regulation preset, reminder settings | To set up the right protocol and reminders |
| Team | Names, initials and roles of staff you add | So records show who ran a cycle. Staff are not given accounts and are not contacted by us |
| Sterilization records | Cycles, indicator results, printout readings, spore tests, corrective actions, machine tests, consumable lots, autoclave details and service visits | This is the product: your log |
| Photos you attach | Autoclave printouts, test vials, lab reports, box labels, service reports | Evidence stored with the record it belongs to |
| Device and usage | Platform and OS version stamped on each record; crash reports if the app fails | So records say where they were logged from, and so we can fix crashes |
| Subscription | Your purchase status, product and renewal date from the app store; the clinic name, admin email and country | To unlock the subscription across your clinic's devices and to answer billing questions |
What we deliberately do not collect
- Patient data. Nothing in Clavio identifies a patient, and the app has no field for it. Please don't type patient names into notes.
- Location, contacts, or anything else from your phone beyond the camera and photo library when you choose to attach a photo.
- Advertising identifiers. There are no ads and no ad tracking in Clavio.
Where it is stored
Account, clinic and record data is stored with Supabase (Supabase Inc.) in their Singapore region, encrypted at rest and in transit. Photos are stored in a private bucket in the same region and are only readable by signed-in members of your clinic. Records are append-only by design: once saved they cannot be edited or deleted by anyone, including us, except when a clinic is deleted in full.
Who else processes it
| Provider | What they receive | Purpose |
|---|---|---|
| Supabase | Everything above except payment details | Database, authentication, file storage |
| RevenueCat | A clinic identifier, purchase receipts from Apple or Google, the clinic name, admin email and country | Managing subscriptions and billing support |
| Apple App Store / Google Play | Your payment; we never see card details | Taking payment for the subscription |
| Resend | Your email address and the codes we send | Delivering sign-in and recovery emails |
| Sentry | Crash reports with the app version, device model and OS; no record contents | Finding and fixing crashes |
We don't sell data, and we don't share it with anyone else unless the law requires it.
Reminders and notifications
Spore-test, expiry and service reminders are scheduled on your phone. They don't leave the device, and you can switch them off in Settings or in your phone's notification settings.
How long we keep it
For as long as your clinic account exists. Sterilization regulations typically require records to be kept for several years, so we never delete records on our own initiative. When you delete your account from Settings, the clinic, its members, all records and all photos are deleted immediately and cannot be recovered. Export a CSV and your inspection packs first if you need to keep them. Backups held by our hosting provider expire within 30 days.
Your rights
- Export: every record as CSV, and any period as a PDF pack, from inside the app at any time.
- Correction: records can't be edited (that's the point), but you can append a dated note to any of them.
- Deletion: Settings → Delete account. Or email us and we'll do it for you after confirming you're the clinic admin.
- If you are in the UK, EU or another jurisdiction with data-protection law, you also have the right to access, portability, restriction and to complain to your supervisory authority. Email us first; we'll usually sort it within a few days.
Children
Clavio is for dental professionals and is not intended for anyone under 18.
Changes
If we change this policy in a way that matters, we'll show it in the app before the change takes effect. The date at the top is the date of the current version.
Contact
support@clavio.health
Sohail Abbas
Bengaluru, Karnataka, India