Privacy Policy
The short version. Dosely stores health information you choose to enter — your doses, weight, symptoms, food and lab values. We use it to show you your own history and patterns. We do not sell it, we do not use it for advertising, and you can delete all of it at any time.
Contents
1. Who we are
Dosely ("Dosely", "we", "us") is a mobile application operated by [[COMPANY LEGAL NAME]], registered at [[REGISTERED ADDRESS]], [[CITY, STATE, POSTCODE, COUNTRY]].
For the purposes of applicable data protection law, [[COMPANY LEGAL NAME]] is the data controller (or, under India's Digital Personal Data Protection Act, 2023, the Data Fiduciary) for the personal data described in this policy.
2. What we collect
Most of what Dosely holds is information you type in yourself. We have grouped it by category below.
| Category | Examples | Source |
|---|---|---|
| Health & medication data | Medication name and dose, dose date and time, injection site, body weight, HbA1c results, side effects and severity, cravings, food and water entries, activity | You enter it |
| Profile data | Name or nickname, date of birth, gender, height, activity level, goal weight | You enter it |
| Account data | Email address and authentication identifier | You, or your Google / Apple sign-in |
| Device & diagnostic data | Device model, operating system version, app version, crash reports, anonymous usage events | Collected automatically |
| Purchase data | Subscription status and renewal dates | Apple App Store / Google Play |
| Content you submit | Photos of meals, voice recordings used for food logging, free-text notes | You provide it |
Sensitive personal data. Information about your medication, weight, symptoms and lab results is health data, which most privacy laws treat as a special or sensitive category requiring extra protection. We handle it on that basis. We do not require you to provide it — the app simply cannot do much without it.
We do not collect your payment card details (Apple and Google handle billing), your precise location, your contacts, or your advertising identifier.
3. Why we use it
- To run the app you asked for — showing your dose history, next-dose countdown, estimated medication level, rotation history, weight and HbA1c trends.
- To send reminders you have configured, such as an upcoming dose or an HbA1c test that is due.
- To surface patterns in your own logged data — for example, which weekday you have most often recorded cravings on. These reflect your history. They are not predictions, diagnoses or clinical findings.
- To generate exports you request, such as a CSV or report to bring to an appointment.
- To keep the app working — diagnosing crashes, fixing bugs, and understanding which features are used, using aggregated or anonymised data wherever possible.
- To manage subscriptions and confirm entitlement to paid features.
- To meet legal obligations where they apply to us.
We never use your health data for advertising, and we never sell it. We do not share it with data brokers, insurers, employers or pharmaceutical companies.
4. Legal basis
Where the GDPR or UK GDPR applies, we rely on: your explicit consent for processing health data (Article 9(2)(a)); performance of a contract for account and subscription functions; and our legitimate interests in keeping the service secure and functional. Where India's Digital Personal Data Protection Act, 2023 applies, we process your personal data on the basis of the consent you give when you accept this policy and the in-app disclaimer.
You can withdraw consent at any time by deleting your account. Withdrawal does not affect processing carried out before withdrawal.
5. Who we share it with
We share data only with service providers who process it on our behalf under contract, and only as far as needed to run the app.
| Provider | Purpose | Data involved |
|---|---|---|
| Google Firebase (Authentication, Firestore, Cloud Storage, Crashlytics) | Account sign-in, cloud backup and sync, crash reporting | Account data, health data you have chosen to sync, diagnostic data |
| Google Firebase AI Logic (Gemini) | Photo and voice food logging, plain-language insight summaries | Only the specific meal photo, voice clip or summary inputs needed for that request |
| Apple App Store / Google Play | Subscription billing and entitlement | Purchase data. We never receive your card details. |
We may also disclose data if required by law, court order or a valid request from a public authority, or to protect the rights and safety of our users or the public. If ownership of Dosely changes through a merger or acquisition, your data may transfer to the new owner, who would remain bound by this policy or give you notice of any change.
6. Apple Health and Health Connect
If you grant permission, Dosely can read and write weight, steps and activity data to Apple HealthKit (iOS) or Google Health Connect (Android). This is entirely optional and the app works without it.
- We request only the data types needed for the features you use.
- Data read from HealthKit or Health Connect is never used for advertising or marketing, and is never sold or shared with third parties for their own purposes.
- We do not use HealthKit or Health Connect data for any purpose other than health and fitness features within Dosely.
- You can revoke access at any time in your device settings. Revoking it stops future syncing; data already stored in Dosely remains until you delete it.
7. AI features
Some premium features use Google's Gemini models via Firebase AI Logic — estimating nutrition from a meal photo, turning a spoken description into a log entry, and writing plain-language summaries of your own logged trends.
- Only the input needed for that specific request is sent. Your full history is not uploaded.
- AI output is an estimate. Nutrition figures from a photo are approximate, and narrative summaries describe your logged history — neither is medical advice, a diagnosis, or a prediction of your results.
- You can use Dosely without these features by entering food manually.
8. How long we keep it
- While your account is active, we keep your health and profile data so your history stays intact.
- When you delete your account, we delete your personal and health data from our live systems within [[N]] days, and from encrypted backups within [[N]] days.
- Diagnostic and crash data is retained in aggregated or anonymised form and cannot be traced back to you.
- Records we must keep by law, such as transaction records for tax purposes, are retained for the period the law requires.
See Delete your account for how to start this.
9. Security
We protect your data with encryption in transit (TLS) and at rest, authenticated access controls so that only you can reach your records, and least-privilege access for our own staff. Data stored locally on your device is protected by your device's own encryption and lock screen.
No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant supervisory authority as required by applicable law.
10. Your rights
Depending on where you live, you have some or all of the following rights:
- Access — get a copy of the personal data we hold about you.
- Correction — fix anything inaccurate or incomplete.
- Deletion — have your data erased. See Delete your account.
- Portability — receive your data in a machine-readable format. Dosely also offers in-app CSV export.
- Withdraw consent — at any time, without affecting prior processing.
- Object or restrict — ask us to stop or limit certain processing.
- Complain — to your data protection authority. In India this is the Data Protection Board; in the EU or UK, your national supervisory authority.
To exercise any of these, email privacy@dosely.fit. We will respond within the period required by applicable law and may need to verify your identity first.
11. Children
Dosely is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact privacy@dosely.fit and we will delete it.
12. International transfers
Our service providers may process data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. [[CONFIRM YOUR FIREBASE DATA REGION AND LIST IT HERE]]
13. Changes to this policy
We may update this policy as the app changes or the law does. We will update the date at the top, and for material changes we will notify you in the app or by email before they take effect. Continuing to use Dosely after a change means you accept the updated policy.
14. Contact and grievances
For any privacy question or request:
Email: privacy@dosely.fit
Entity: [[COMPANY LEGAL NAME]]
Address: [[REGISTERED ADDRESS]]
Grievance Officer (required under India's DPDP Act): [[NAME]], [[EMAIL]]