Privacy Policy
What Dosiq collects, where it lives, who processes it, and the control you have over it.
Dosiq is a private tracking and education tool, not a medical device. Dosiq records what you log about GLP-1, GIP/GLP-1, and related medications and helps you spot patterns. It does not provide medical advice, a diagnosis, or dosing instructions. Always confirm medical decisions with your prescribing clinician. See the Terms of Service for the full medical disclaimer.
Who We Are
This Privacy Policy explains how Dosiq ("Dosiq", "we", "us", or "our") collects, uses, shares, stores, and protects personal data when you use the Dosiq mobile application and its related services (together, the "Service"). If you have any privacy question, data-rights request, or complaint, contact us at [email protected].
Summary
- Everything you log is stored in an encrypted database on your device, and by default is also synced over an encrypted connection to Dosiq's own servers so you can restore it on a new device.
- You can use Dosiq without an account. When you sign in with Apple or Google, your synced data is tied to that account. Dosiq never sees or stores a password.
- Dosiq uses its own first-party analytics (self-hosted, not an advertising network) to understand how the app is used and to keep it reliable.
- Dosiq does not sell your data, does not serve ads, and does not embed third-party advertising or social trackers.
- Dosiq does not read from or write to Apple Health.
Personal Data We Collect
Health and tracking data you enter
Dosiq is built for you to record health-related information. Depending on what you choose to log, this can include:
- medication doses: active ingredient / medication name, brand, route, injection site, dose strength (for example mg), date, time, pain score, and free-text notes;
- compounded-medication details, including a pharmacy lot number if you choose to enter one;
- weight measurements;
- daily symptom entries (for example nausea, vomiting, diarrhea, constipation, abdominal pain, reflux, headache, dizziness, fatigue);
- food-noise and hunger scores;
- nutrition entries (for example calories, protein, water, fiber);
- free-text notes.
Profile data
To personalize educational estimates, Dosiq can store your birth year (used to derive your age), the sex used for calculations, height, starting weight, goal weight, activity level, GLP-1 or medication status, medication name, your goals, and your in-app preferences.
Account data
You can use Dosiq anonymously. If you sign in with Apple or Google, we receive an account identifier from that provider and, depending on the provider and your choices, your name and email address. We never receive or store a password. Sign-in ties your synced data to your account so it stays yours across devices.
Subscription and purchase data
Paid features are sold through the Apple App Store and managed with RevenueCat, our subscription infrastructure provider. In connection with a subscription we process your subscription and entitlement status and an app-user identifier tied to your account. We do not receive your full payment card number; Apple handles the payment.
Analytics and diagnostics data
Dosiq operates its own first-party analytics on its own servers to understand product usage, measure feature adoption, diagnose errors, and keep the app reliable. When analytics is active, it records:
- app events such as screens viewed, features used, session activity, subscription and purchase events, and referral / attribution events;
- dose-logging events, which include the medication's active ingredient and whether it is categorized as a GLP-1 or peptide — this is health-related information that is recorded in analytics;
- error reports, which may include an error message, a stack trace, and the screen where the error occurred;
- an anonymous device identifier, a session identifier, your app language, and your operating-system and app version;
- a coarse country and city derived from your IP address (never precise GPS location); and
- after you sign in, your account identifier, email address, and sign-in provider, which are associated with your analytics profile.
Analytics is used only to run and improve Dosiq. It is never used to serve you advertising, and the data is never sold. Where the law requires your consent for this kind of analytics, we will obtain it before enabling it.
Notification data
If you enable notifications, we register a push token together with your timezone, platform, app version, and your marketing opt-in preference so we can deliver dose reminders, re-engagement reminders, and — only if you opt in — occasional product messages.
Device and technical data
We process basic technical data such as device platform, operating-system version, app version, and the diagnostic and error data described above so that we can operate the Service, fix bugs, and maintain security.
What we do not collect
- We do not read from or write to Apple Health. That integration is disabled.
- We do not collect precise (GPS) location.
- We do not use advertising identifiers (such as the IDFA) and do not embed advertising or social-network trackers.
- We do not sell your personal data.
Where Your Data Lives and How It Syncs
Dosiq is local-first. Every entry you create is stored in an encrypted database inside the app's protected storage on your device. By default, your entries are also transmitted over an encrypted (HTTPS/TLS) connection to Dosiq's own servers so they can be restored on a new device and so features that require the server can work.
This synchronization is on by default, and it begins even before you sign in — while you are anonymous, your data is synced under an anonymous identifier. When you sign in with Apple or Google, your synced data is tied to your account. If you uninstall Dosiq without signing in or exporting your data, entries that exist only on your device may be permanently lost.
How We Use Personal Data
- to provide, operate, and maintain the Service and store your entries;
- to sync your data across your devices and let you restore it after reinstalling or switching devices;
- to create and manage your account and authenticate you;
- to generate the trends, educational estimates, and summaries you ask for;
- to process subscriptions and entitlements through the App Store and RevenueCat;
- to send reminders and, if you opt in, product messages;
- to understand usage, measure feature adoption, diagnose errors, and improve the app;
- to keep the Service secure and to prevent fraud and abuse;
- to provide support and to comply with legal obligations.
Legal Bases for Processing
Where privacy law (such as the GDPR) requires a legal basis, we rely on:
| Purpose | Typical legal basis |
|---|---|
| Delivering the app you installed, storing and syncing your entries, account features, and subscriptions | Performance of a contract with you |
| Product analytics, diagnostics, security, and fraud and abuse prevention | Our legitimate interests in operating and improving a reliable, secure service |
| Optional analytics or marketing where a jurisdiction requires opt-in, and any device permission | Consent, which you can withdraw at any time |
| Meeting tax, accounting, and other legal requirements | Legal obligation |
Where the law requires consent for a specific processing activity, we obtain that consent before carrying it out.
Service Providers and Third Parties
We share personal data only with the providers we need to run the Service. We do not sell your data and we do not share it with advertising networks.
| Provider | Role | Data involved |
|---|---|---|
| Apple | Sign in with Apple; App Store billing and payments | Sign-in identifier and, if shared, name/email; purchase transactions |
| Sign in with Google | Sign-in identifier and, if shared, name/email | |
| RevenueCat | Subscription and entitlement management | Your Dosiq account identifier and subscription status |
| Expo push service | Delivery of push notifications | Your push token and message metadata |
| ipwho.is and ipapi.co | IP-based geolocation lookup (only when analytics is active), to derive a coarse country/city | Your IP address, sent to the lookup service at request time |
| Dosiq servers | First-party data sync and first-party analytics | The data described in this policy |
We may also disclose personal data to legal, tax, and professional advisers, and to regulators, courts, or law-enforcement bodies where required by law or necessary to protect rights, safety, or the Service. If Dosiq is ever involved in a merger, acquisition, or sale of assets, personal data may transfer to the successor, subject to this policy.
International Transfers
Dosiq and its providers may process personal data in countries other than the one where you live. Where applicable law requires safeguards for such transfers, we rely on lawful transfer mechanisms such as standard contractual clauses and appropriate contractual and security protections. Contact us for more information about the safeguards relevant to your data.
Data Retention
We keep personal data only as long as needed for the purposes in this policy, and to meet legal, security, and dispute-resolution needs.
- Entries on your device are kept until you delete them or remove the app.
- Synced entries are kept on our servers, tied to your account or anonymous identifier, until they are deleted at your request.
- Analytics and diagnostic events are kept for a limited reporting window.
- Support correspondence is kept for as long as needed to resolve your issue and to meet record-keeping obligations.
Your Rights and Controls
Inside Dosiq you can read, edit, or delete any individual entry at any time, and you can export your data from Settings. The "Delete all data" control in Settings erases the database stored on your device. Removing the app from your device also removes the local database it created.
To delete the data held on our servers under your account or anonymous identifier, email [email protected] from the address associated with your account; we will action account and server-side deletion. We are also rolling out an in-app account-deletion control.
Depending on where you live, you may have the right to access, correct, delete, restrict, or object to processing of your personal data, to receive a portable copy, to withdraw consent, and to complain to a supervisory authority.
- EEA, UK, and Switzerland (GDPR): you have the rights above and the right to lodge a complaint with your local data-protection authority.
- California (CCPA/CPRA): you have comparable rights, including the right not to be discriminated against for exercising them. We do not sell or "share" your personal data for cross-context behavioral advertising.
To exercise any right, contact [email protected]. We may need to verify your identity, and we may decline or limit a request where an exemption applies.
Security
We use technical and organizational measures designed to protect personal data, including on-device encrypted storage, encrypted connections in transit, platform keychains for credentials, access controls, and a small set of vetted libraries. No system is perfectly secure, so please keep your device, operating system, and account credentials protected.
Children
Dosiq is intended for adults and is not directed to anyone under 18. We do not knowingly collect personal information from a person under 18. If we learn that we have done so without appropriate consent, we will delete it promptly. If you believe a minor has provided us data, contact [email protected].
Automated Processing
Dosiq's trends, "estimated active amount", and similar figures are simplified educational estimates based on published ranges. They are not clinical measurements, and they are not used to make decisions that produce legal or similarly significant effects about you. They never replace professional judgment.
Changes to This Policy
We may update this Privacy Policy from time to time. If we make a material change, we will update the "Last updated" date and, where appropriate, notify you in the app. The revised policy takes effect on the date stated above unless the law requires otherwise.
Contact
For any privacy question, request, or complaint, contact Dosiq at [email protected].