Last Updated: 20 February 2026
Sukina Software Ltd (“we”, “us”, “our”) operates the Sukiru app (the “Service”).
This Privacy Policy explains what information we collect, how we use it, and your rights.
Sukina Software Ltd
20–22 Wenlock Road
London
N1 7GU
United Kingdom
Email: hello@sukiru.app
We are the data controller for the limited data we collect directly.
2.1 Information We Collect Automatically
We do not collect personal client records stored in your account for our own purposes.
We only collect limited technical data necessary to operate and improve the app, including:
This information is used only to:
We do not use this data for advertising.
2.2 Information You Store in the App
The app allows you to store:
This information is stored to provide the Service to you.
We do not access, review, share or sell your client data except:
You are responsible for ensuring you have appropriate consent and legal grounds to store your clients’ personal data.
If you connect a Stripe account or purchase a subscription through Apple App Store or Google Play:
Please review:
The app may interact with third-party services, including:
If you enable calendar syncing or visit external links, those third parties may process data according to their own privacy policies.
We are not responsible for third-party privacy practices.
Stripe – for the purposes of payment transaction management.
https://stripe.com/privacyWe do not sell your data.
We do not share client records with third parties for marketing purposes.
We may share limited technical data with trusted service providers who help us:
These providers are contractually required to keep information secure and confidential.
We may also disclose information if required by law or legal process.
We retain technical logs only for as long as reasonably necessary to:
If you delete your account, your stored data may be deleted in accordance with our system processes.
You are responsible for maintaining your own backups of important business records.
We take reasonable technical and organisational measures to protect data.
However, no online service can guarantee 100% security. You use the Service at your own risk.
Your data may be processed in countries outside your own, including where our hosting providers operate.
Where required, we ensure appropriate safeguards are in place.
If you are located in the UK or European Economic Area, you may have the right to:
Because we collect minimal personal data, these rights will generally apply only to account and technical information.
To exercise your rights, email: hello@sukiru.app
The Service is intended for users aged 16 or over.
We do not knowingly collect personal data from children.
We may update this Privacy Policy from time to time.
When we do, we will update the “Last updated” date. Continued use of the Service means you accept the updated policy.
If you have questions about this Privacy Policy, contact:
(For professional users storing client medical or treatment data)
This document is suitable for UK GDPR / EU GDPR compliance and written proportionately to your app’s structure.
Last Updated: 20 February 2026
This Data Processing Addendum (“DPA”) forms part of the Terms and Conditions between:
This DPA applies where you store personal data, including special category data (such as medical or treatment information), within the Sukiru app.
1. Roles of the Parties
You are the Data Controller in respect of all client data you enter into the app.
Sukina Software Ltd acts solely as a Data Processor, processing personal data on your behalf for the purpose of providing the Service.
We do not determine the purpose or means of processing your client data.
2. Nature and Purpose of Processing
Processing is limited to:
We do not use client data for marketing or advertising.
3. Categories of Data
Depending on how you use the Service, personal data may include:
Medical or treatment information may constitute special category data under UK/EU data protection law.
You are solely responsible for ensuring you have a lawful basis to process such data.
4. Controller Obligations
You warrant that:
You remain fully responsible for your client relationships and legal compliance.
5. Processor Obligations
We agree to:
6. Sub-Processors
We may engage trusted third-party service providers (such as hosting providers or infrastructure services) to support delivery of the Service.
Where we use sub-processors:
A list of primary infrastructure providers is available upon request.
7. International Transfers
Where data is transferred outside the UK or EEA, we will ensure appropriate safeguards are in place, such as:
8. Security Measures
We implement reasonable technical and organisational measures designed to protect personal data against:
However, no system can guarantee absolute security.
9. Data Breach Notification
If we become aware of a personal data breach affecting your stored data, we will notify you without undue delay after becoming aware of it.
You are responsible for determining whether notification to a supervisory authority or affected individuals is required.
10. Data Retention and Deletion
Client data is retained for the duration of your account.
Upon account deletion, data may be deleted in accordance with our system processes.
You are responsible for exporting or backing up records required for your legal or regulatory obligations.
11. Liability
Each party’s liability under this DPA is subject to the limitations of liability set out in the main Terms and Conditions.
12. Governing Law
This DPA is governed by the laws of England and Wales.