Privacy Policy

Dosi ("we," "our," or "us") is operated by 3WB Holdings, LLC. This Privacy Policy explains how we collect, use, store, and protect your information when you use the Dosi mobile application and website (collectively, the "Service"). By using Dosi, you agree to the practices described in this policy.

Dosi is an educational tool for personal tracking. It is not a medical device and does not provide medical advice.

1. Information We Collect

Account Information

• Email address and password (for account creation)
• Display name (optional)

Health & Biometric Data

You may voluntarily enter the following health-related information into the app:

• Medicine and supplement dose logs (substance name, dose amount, unit, date/time)
• Injection site records
• Body weight and body composition measurements
• Mood, energy, and sleep quality scores
• Vial inventory (compound name, reconstitution volume, expiry)
• Dosing schedules and reminders
• Progress photos (stored locally on your device only; never uploaded)

If you connect a third-party wearable or health device (e.g., Withings scale), we receive biometric readings (weight, body fat %, muscle mass) from that device via its official API with your explicit authorization.

Usage Data

• App feature interactions (which screens you visit)
• Crash reports and error logs
• Device type and operating system version

Payment Information

Subscription payments are processed by Stripe. We do not store your credit card number or full payment details — only a Stripe customer ID and subscription status.

2. How We Use Your Information

• To provide and operate the Dosi tracking service
• To sync your data across your devices
• To send dose reminders and notifications you have enabled
• To generate your personal progress charts and insights
• To improve the app based on aggregated, anonymized usage patterns
• To send transactional emails (account, billing)

We do not sell your health data. We do not use your health data for advertising. We do not share identifiable health data with third parties except as required to operate the service (e.g., cloud hosting).

3. Data Storage & Security

Your data is stored in Supabase (PostgreSQL), hosted on AWS infrastructure in the United States. Data is encrypted at rest (AES-256) and in transit (TLS 1.2+). Access to the database is restricted to authenticated sessions only.

iOS app data is additionally stored locally using SwiftData on your device, protected by iOS data protection.

4. Data Retention

We retain your account and health data for as long as your account is active. If you stop using Dosi but do not delete your account, we retain your data for up to 2 years of inactivity before it is automatically purged from our systems.

Billing records are retained for 7 years as required by financial regulations. Anonymized, aggregated analytics data (no personal identifiers) may be retained indefinitely.

5. Deleting Your Data

You have the right to delete your account and all associated health data at any time:

• In-app: Go to Settings → Account → Delete Account. This permanently removes all your dose logs, biometric data, vial records, and account information within 30 days.
• By email: Send a deletion request to privacy@heydosi.com from your registered email address. We will complete the deletion within 30 days and confirm by email.

After deletion, anonymized aggregate statistics derived from your data (e.g., total app users) may persist but cannot be linked back to you.

6. Third-Party Integrations

When you connect a third-party service, that service's own privacy policy also applies:

• Withings — weight and body composition data. See Withings Privacy Policy
• Stripe — payment processing. See Stripe Privacy Policy

You can revoke any third-party integration at any time from Settings → Integrations.

7. Children's Privacy

Dosi is not directed to children under 18. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us at privacy@heydosi.com and we will delete the account promptly.

8. Your Rights

Depending on your location, you may have rights under GDPR, CCPA, or other privacy laws, including:

• Right to access the data we hold about you
• Right to correct inaccurate data
• Right to delete your data (see Section 5)
• Right to data portability (export your data by emailing us)
• Right to opt out of non-essential data processing

To exercise any of these rights, contact us at privacy@heydosi.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and notify you by email or in-app notice for material changes.

10. Contact Us

3WB Holdings, LLC
privacy@heydosi.com