SutraDay
Last updated 18 October 2026
SutraDay is made by Omnisoft Technologies. The short version: sign-in is optional. If you never sign in, nothing changes: no accounts, no servers, nothing leaves your phone. If you choose to sign in for backup, our server stores an encrypted copy of your practice that we cannot read, plus five practice-total numbers.
Nothing, unless you sign in. SutraDay has no advertising and no third-party analytics or tracking SDKs, whether or not you sign in. Sign-in is entirely optional and is currently offered on iPhone with Sign in with Apple (Google sign-in and Android backup will come in a later update). If you never sign in, nothing changes: no accounts, no servers, nothing leaves your phone. If you choose to sign in so you can back up and restore your practice, we then store:
We use this information only to run your account and backup. We do not sell it, share it, or use it for advertising or tracking.
Backup content is encrypted on your device before it is sent. Our server stores the ciphertext; it does not hold the key.
| Our server can see | Our server cannot see |
|---|---|
| That an account exists (account number, sign-in provider and its identifier, and your email if the provider shares one) | The texts you read |
| Backup timestamps and the device label | The intentions you chose |
| Five practice-total numbers (practices completed, open lotuses, soil, tree day, last practice date) | Your practice journey itself — the backup is ciphertext only |
| — | Which app you shield with refuge |
Requests to our server travel over HTTPS through Cloudflare, which provides the secure connection and protects the server from attack traffic.
Our server runs on Tencent Cloud in Singapore. Its nightly safety copies are encrypted with a key that only we hold and are deleted after 30 days.
The key that encrypts your backup is created on your phone and never sent to us. On iPhone it is also kept in your iCloud Keychain, which Apple encrypts end to end, so a reinstall or a new iPhone signed into the same Apple Account can usually restore on its own. When you first sign in, SutraDay shows you a recovery code: it is the only other way to open your backup, we do not keep a copy, and we cannot recover your backup without it.
In the app: Settings → Progress & account → Delete account. This removes your account, your encrypted backup and the five numbers from our server right away, and on iPhone it also revokes SutraDay’s Sign in with Apple authorization.
Without the app: if you no longer have SutraDay installed, follow the steps on Delete your SutraDay account. We confirm the request and delete the same data within 30 days.
Our server’s own safety copies are kept for at most 30 days, so deleted data also disappears from those within 30 days. We keep nothing else about you.
The following is saved in the app’s private storage on your phone:
If you never sign in, none of this is sent to us, and deleting SutraDay removes it from the app — there is nothing to request or erase from us, because we never received it. If you sign in, an encrypted copy of this practice data is included in your backup, as described above.
Your phone’s own backup (iCloud device backup, or Android’s backup to your Google account) may include the app’s on-device data, as it does for most apps. That backup is stored by Apple or Google under your own account and settings; we cannot access it.
Refuge is optional. If you turn it on, SutraDay asks for permissions that let it place a mindful pause in front of one app that you choose.
On iOS, SutraDay uses Apple’s Screen Time (Family Controls) framework. Your selection is handled by the system as a private, opaque token. The app applies a shield to that selection and can grant a temporary pass; it does not read your activity history, and it does not receive a list of the apps installed on your device.
On Android, SutraDay uses Usage Access to notice when your chosen app comes to the foreground, the “appear on top” permission to display the pause screen, and a foreground service so the pause keeps working reliably. The notification permission is optional: it only controls whether you see the quiet “protection is active” indicator. When you pick your app, the picker reads the list of launchable apps on your device to display it to you — that list is shown on screen only. It is not stored, profiled, or transmitted. Only the single app you select is saved.
In both cases SutraDay does not build a usage history, does not track how long you spend in other apps beyond what is needed to run an active compassion pass, and does not send any of it off the device.
If you allow notifications, they are generated locally on your device to support your practice. We do not operate a push notification service, and no notification content is ever transmitted anywhere.
SutraDay’s practice content, including the canonical texts in the chant library, ships inside the app. Ordinary use requires no internet connection. If you never sign in, the app makes no network requests to us. Signing in and using backup requires network access to reach our accounts server, for the purposes described above.
SutraDay does not currently sell anything. If a future paid tier (Premium) arrives, purchases will go through Apple’s or Google’s own in-app purchase systems — the store, not SutraDay, handles your payment details, and no account or sign-in will be required to purchase or restore a purchase. This policy will be updated if that changes.
SutraDay is not directed at children and does not knowingly collect information from children. It is a self-applied mindfulness tool, not a parental-control or monitoring product: it cannot be used to observe another person’s device.
The chant library contains public-domain canonical Buddhist texts, alongside practice texts written by SutraDay. Every text in the app is labelled with its source and status, so you always know what you are reading. SutraDay is a contemplative practice app, not medical or mental-health treatment, and is not affiliated with any temple, monastery, or religious organization.
If this policy changes, the updated version will be posted at this address with a new “last updated” date.
Questions about this policy, the app, or your data: support@omnisoftsolution.com