Privacy policy

Last updated 28 October 2026. Emivy Studio, LLC ("Emivy Studio", "we") makes OpVitae.

In short: OpVitae keeps your records on your iPhone. We have no accounts, no analytics, no advertising and no tracking. Patient information you enter stays on your iPhone. It is never sent to us, and never stored in iCloud. We cannot see your data, so we cannot lose it, sell it or hand it over.

1. What we collect

Emivy Studio collects no personal information through OpVitae. There is no account to create and no sign-in. The app contains no analytics, advertising, tracking or crash-reporting software. If crash reporting is ever added, it will report only codes, counts and screen geometry, never text you entered or anything read from a photo, and this policy will say so before it ships.

2. What stays on your iPhone

Your case log: cases, procedures, patients and their details (including names, dates of birth and medical record numbers), facilities, and the files you submit to boards. It is stored only on your iPhone. It is never sent to Emivy Studio or any server, is never stored in iCloud, and is left out of iCloud Backup. Patient names, dates of birth and medical record numbers are encrypted on your iPhone. Because it exists only on your iPhone, losing the iPhone loses the case log unless you have kept a copy with Export everything, which the app reminds you to do.
Your own records: your profile, credentials and their numbers, CME, training and work history, board enrollments, and documents you add (such as licenses and certificates). Credential numbers and documents are encrypted on your iPhone.
Camera, photos, files and dictation. Reading a patient sticker, scanning a certificate and turning speech into text all happen on your iPhone using Apple's own on-device technology. A photo of a patient sticker is not saved after it is read. Documents you choose to keep are stored, encrypted, with the record you added them to. Photos you pick are chosen through Apple's own picker; OpVitae is not given access to your photo library.

3. iCloud: your own records only

If iCloud Backup is on, your iPhone's backup includes your own records (section 2, second item), never your case log. When your iPhone is signed in to iCloud, your own records are stored in your private iCloud account so they reach your other devices signed in to the same account. There is no setting in OpVitae to turn this on or off, and your case log is never synced or stored in iCloud. Apple provides this, and Emivy Studio has no access to it.

The keys that unlock encrypted fields are kept in your iCloud Keychain, so they reach your other Apple devices when iCloud Keychain is on; Emivy Studio never sees them. The recovery phrase the app shows you can rebuild those keys; we do not keep a copy.

4. What OpVitae connects to

OpVitae does not connect to any server of ours, and makes no internet requests of its own. The rules it uses for credentialing bodies (for example, a board's renewal cycle) are built into the app and change only when you update it from the App Store. The only times OpVitae reaches the internet are when you ask it to:

a web page you open from the app, such as a board's page you entered, or our terms and this policy, opens in Safari;
an email you choose to send us opens in Mail (section 7);
purchases and subscriptions go through Apple (section 5);
iCloud, if you use it, is Apple's (section 3).

If a later version fetches updated rules from us, this section will say what is requested, what our server's logs record, and how long they are kept, before that version ships.

5. Purchases

Subscriptions are sold and managed by Apple. We do not receive your name, payment details or Apple ID; the app checks with Apple, on your iPhone, whether a subscription is active. Apple's privacy policy applies to purchases.

6. When you share

OpVitae never sends your data anywhere on its own. When you export or share (a board case list, the credentialing packet, Export everything) you choose where it goes through Apple's share sheet, and that destination's own terms then apply. Board files and the credentialing packet never contain patient names, dates of birth or medical record numbers; Export everything includes them only if you switch that on.

7. Emails you send us

If you write to us from the app, we receive what you write and your email address, plus the app's and iOS's version numbers the app adds. We use them only to answer you. Please never include patient information in a message to us.

The app can prepare two reports for you to send through your own Mail. Each is shown to you in full before you send it, and each is sent only if you tap Send. Neither holds any patient information or anything you typed: only counts, codes, times and the shape of a sticker.

A reading report, offered when the app could not read a patient sticker. It holds the sticker's shape only: how many lines of text it had and where each sat, how the photo was turned and how sharp it was, which details were found by name (for example "MRN") and how many characters each had, and which reading step stopped. It never holds the photo or any text from the sticker.
A sync report, from Help, when syncing seems wrong. It holds counts, codes and times only, never the content of any record.

8. Your choices, and deleting your data

Everything OpVitae holds is on your iPhone, or in your own iCloud account, under your control. There are two ways to delete it, and they differ.

To delete everything, everywhere: More, then Delete everything. This erases all of OpVitae's data from your iPhone (your case log, your own records, the documents you added) and the keys that unlock encrypted fields. If your iPhone is signed in to iCloud, it also deletes your own records from your iCloud account. It needs an internet connection; without one, nothing is deleted and the app tells you. The keys are shared through iCloud Keychain, so patient details and credential numbers on any other iPhone or iPad using OpVitae with the same Apple ID can no longer be read either. If such a device is still signed in to iCloud with its own copy of your records, it will put that copy back in iCloud, so sign it out of iCloud first. If your iPhone is signed out of iCloud, Delete everything erases your iPhone only: your own records already in iCloud stay there until you sign in and run Delete everything again, and the keys on your other devices are left as they are. The app tells you about this on the screen before you confirm.
To delete OpVitae from one iPhone only: remove the app (touch and hold its icon, then Remove App, then Delete App). This removes your case log and your records from that iPhone, and leaves your own records in iCloud, your other devices and the keys in your iCloud Keychain as they are. Your case log has no copy anywhere else, so keep an Export everything copy first if you want it.

Your own records in an iCloud backup are managed in your iPhone's Settings. As we hold no data about you, there is nothing for us to delete or provide on request, but you may ask us anything at privacy@emivy.studio.

9. This website

This section is about the website only; nothing in it applies to the app. emivy.studio is hosted by Wix, which adds its own scripts to the site, including visitor analytics and a cookie-consent notice, and records technical information such as your IP address, browser and the pages you visit, to deliver, protect and measure the site. Wix's privacy policy covers what it collects. We use the site's statistics only to see how the site is used, never to identify you, and we run no advertising. You can decline non-essential cookies in the notice. If you email us from the site, section 7 applies.

10. Children

OpVitae is a professional tool for physicians. It is not directed to children, and is not meant for anyone under 18.

11. Your responsibilities

OpVitae is a tool for keeping your own records. Whether entering patient information into it is permitted is for you to decide under your institution's policies and the law that applies to you.

12. Changes

If this policy changes, we will update the date above and, for a material change, say so in the app before it takes effect.

13. Contact

Emivy Studio, LLC, 5900 Balcones Drive, Suite 100, Austin, TX 78731. privacy@emivy.studio for privacy questions, support@emivy.studio for help with the app.