1. Controller and contact

The controller for processing your personal data in the Elnavi app and on elnavi.ch is:

Elnavi Petri
Owner: Cengizhan Petri
Sole proprietorship, entered in the commercial register of the Canton of Nidwalden
Hansmatt 14, 6370 Stans, Switzerland
UID: CHE-398.000.083
Email: info@elnavi.ch

For any question about privacy and to exercise your rights, write to info@elnavi.ch. We reply within 30 days.

2. The essentials in brief

Elnavi is a Swiss app for organisation and general information for parents, from pregnancy to toddlerhood. Medical texts stay general: they do not say whether a child or a pregnancy is «normal» or needs treatment. Elnavi does not diagnose, does not calculate percentiles and does not set a «due» vaccination status.

What you record about pregnancy, health and your child stays on your device. On our servers we only process what is needed for licence codes and subscriptions. There is no sign-up by email or phone.

We do not sell data, show no ads and use no trackers. Your health insurer (Krankenkasse / LAMal) receives no personal data about you (section 6).

3. Data on your device

Everything you enter in Elnavi is stored locally on your smartphone or tablet. We have no access to it. There is no upload of health or child data.

• Which data: profile, notes on pregnancy and wellbeing, complaints, crisis and breathing-space plan, breastfeeding log, vaccinations, your child’s height and weight, milestones, appointments, checklists, ultrasound album and settings.
• Health data: information about pregnancy, the postpartum period and the child is particularly sensitive personal data. Elnavi does not use it for a diagnosis, a percentile calculation or a judgement that something is «notable». Profile, vaccinations and the breathing-space plan are also encrypted (Android Keystore or Apple Keychain). The breastfeeding log, appointments and ultrasound album sit in the app’s protected storage, which other apps cannot read.
• Device backup: if a backup runs through your Google account or iCloud, app data may be part of it. It travels via your own account with Google or Apple; we have no access. On Android the encrypted areas and the ultrasound album are excluded from backup. On iOS, app data, including the album, may be part of an encrypted iCloud or computer backup.
• Search: search terms stay in working memory only. They are not stored and not sent.
• Deletion: under Profile › Delete all my data you remove all entries, images and settings on the device and, at the same time, your data with us (section 9). If you uninstall the app, local data is deleted as well. What is not deleted: appointments already copied into the device calendar, originals in the gallery, and files you saved elsewhere via Share.
• Ultrasound album: images you add are a copy, only on your device. The original in your gallery stays unchanged. We do not upload images.

4. Anonymous identifier, licence codes and subscriptions

Only for these functions do we process data outside your device.

Anonymous identifier. There is no account and no sign-up with email or phone. Only if you redeem a licence code does the app sign in anonymously with Supabase and receive a random identifier. It contains no details about you, and your entries in the app are neither linked to it nor uploaded. The servers are in Ireland (western EU).

Licence codes. When you redeem a code, we store the code, the time, the anonymous identifier and the validity. Failed attempts are stored with time and reason, to limit abuse. Purpose: unlocking Premium and billing the partner that issued the code. Because there is no account, a redeemed code is bound to your device. If you change device, support at info@elnavi.ch can help.

Subscriptions and purchases. You pay via Google Play or the App Store. We never receive your payment details; Google and Apple process them under their own responsibility, according to their privacy statements. The recipient is RevenueCat, Inc., USA, as a processor for in-app purchases (purchase history, anonymous user ID). The transfer to the USA rests on the EU standard contractual clauses, adapted to the Swiss FADP, which form part of RevenueCat’s processor agreement (June 2026 version). RevenueCat uses sub-processors in the USA. Elnavi does not send email or names to RevenueCat. A subscription can be taken over on a new device via «Restore purchases».

Trial. The 7-day trial is stored only on your device.

Technical logs. Access to our database creates logs with IP address and time. They serve security and troubleshooting and are deleted after 7 days (section 9).

5. Providers and transfers abroad

We work with a small number of providers. They process data only on our behalf and only for the stated purposes.

For transfers to the USA we use the standard contractual clauses recognised by the FDPIC.

6. Health insurers and licence partners

If you use Elnavi through your health insurer (Krankenkasse / LAMal) or another partner, they do not learn who you are, what you enter or how you use the app.

• You receive a licence code from the partner and redeem it in the app. We do not send them personal data.
• For billing we only report aggregated numbers with no personal link, for example how many codes were redeemed. We do not report figures for groups under 10 people.
• Your entries stay on your device, even if Premium comes through a partner.
• The health-insurance decision helper calculates only on your device.
• Elnavi is not an insurance intermediary and receives no commissions from insurers.

7. Calendar, PDF export, reminders and usage measurement

• Calendar: if you ask, Elnavi hands an appointment to the calendar app on your device. Elnavi does not read your calendar. If that app syncs with an account (e.g. Google or iCloud), those terms apply.
• PDF export: you can create a PDF locally (vaccination overview, breastfeeding log, special moments, hospital bag). There is no PDF export of the growth curve. If you share the file, it leaves the app’s protected storage. Share health data only with people you trust, such as your midwife or paediatrician.
• Reminders: the app schedules them locally on your device. We use no push service.
• Usage measurement: we do not measure how you use the app and use no analytics or crash services in the app.
• Crash reports: Elnavi does not embed its own crash service. Google Play (Android Vitals) and Apple may receive crashes if that is allowed in the store or device settings, without the content of your entries.
• Reviews: if the app asks for a review, the Google or Apple dialogue opens. We do not learn whether or how you review.
• Fonts: the app ships its own fonts and loads none from third-party servers.
• External links: if you open a link to an authority or service, or dial the emergency number, the destination’s or the network operator’s privacy statement applies.

8. The website elnavi.ch and email contact

• Website: elnavi.ch is hosted by Netlify (USA). Each visit creates technical logs with IP address, time, page called and browser type. They serve operation and security. The site uses no cookies and no tracking and loads no content or fonts from third-party servers.
• Municipalities form: if you write via the form on elnavi.ch/gemeinden, we process name, organisation, role, email and message in order to reply. The submission goes through Netlify (USA). After that the message sits, like other support mail, in the Hostpoint mailbox in Switzerland.
• Waiting list: waiting-list emails are deleted.
• Email: if you write to us, we store your message and address in the Hostpoint mailbox in Switzerland, in order to reply.

9. Retention and deletion

We keep data only as long as needed for the purpose or required by law.

Delete everything: under Profile › Delete all my data you remove in one step all data on the device, the anonymous identifier and the Premium record with our providers. Redeemed licence codes stay stored with no link to you. You cancel an active subscription separately in Google Play or the App Store.

10. Data security

We protect your data with technical and organisational measures suited to the risk.

• All connections to our providers are encrypted (TLS).
• In the database each identifier only sees its own data (Row Level Security).
• Only the owner has access to the admin interfaces.
• Health data leaves your device only if you share it (PDF, calendar, email).

You add protection by locking the screen of your device.

11. Your rights

Under the Swiss Federal Act on Data Protection you have in particular the right:

• of access to the data we process about you
• to the handover of your data in a common electronic format
• to the correction of inaccurate data
• to the deletion of your data and to object to processing

You manage the data on your device and your anonymous identifier yourself: you can view entries and remove everything with «Delete all my data». For anything else, write to info@elnavi.ch. Because we do not know your name, we can only reliably match data on our servers to you through this function in the app. We reply within 30 days, free of charge.

We take no automated individual decisions and create no profiles in the sense of assessing your health.

If you disagree with our reply, you can contact the Federal Data Protection and Information Commissioner: FDPIC, Feldeggweg 1, 3003 Bern, edoeb.admin.ch.

12. Children, medical content and changes

Children. Elnavi is aimed at adults who are expecting a child or are already parents. You enter information about your child as a parent; it stays on your device. There are no accounts, including for children.

Medical content. Elnavi does not replace medical advice and does not diagnose. For questions about your health or your child’s, contact your midwife, your doctor or emergency number 144.

Changes. We update this statement if the app or the law changes. The current version is in the app and at elnavi.ch/en/datenschutz. We tell you about material changes in the app.