Privacy Policy

Last updated: 20 June 2026

Dosy (“Dosy”, “we”, “us”) is an iOS app for privately tracking peptide, TRT, GLP‑1, and supplement regimens. We built Dosy to be private by design: your health and regimen data live on your device, not on our servers. This policy explains what we do and do not collect.

The short version: Your regimen, doses, metrics, labs, and notes stay in a local database on your device and, if you choose, sync only to your private iCloud. We never receive or store that data. We collect only anonymous, opt‑outable usage analytics, and we never sell your data or run ads.

1. Data stored on your device

Everything you enter — compounds, doses, schedules, inventory, budget, lab results, daily check‑ins (weight, sleep, energy, mood), notes, and saved places — is stored in a local database on your iPhone. We do not have access to it.

iCloud sync (optional). If you enable sync, this data mirrors to your own private iCloud account using Apple’s CloudKit. It stays within your Apple account; we cannot read it. This is governed by Apple’s Privacy Policy.
Apple Health (optional). With your permission, Dosy reads weight, sleep, and heart‑rate variability (read‑only) to improve your trends, and can write weight check‑ins back. Health data is used only inside the app for your own insights — never for advertising and never shared with us or third parties.

2. Anonymous analytics

To understand which features are used and improve the app, Dosy sends minimal, anonymous product events (for example “app opened”, “screen viewed”, “dose logged”). These contain:

A random install identifier (a UUID generated on your device — not your name, email, IDFA, or any device identifier), and
Coarse event names and a few non‑sensitive properties (e.g. a screen name).

We never send health values, doses, lab numbers, weights, notes, or anything identifying you through analytics. Analytics are processed by our hosting provider (Vercel) and stored in a key‑value store (Upstash). In the EU/EEA, the UK, and Switzerland, analytics are off by default and require your opt‑in; elsewhere you can opt out at any time in Settings → Privacy. Clearing the app or choosing “Erase everything” resets the random identifier.

3. Optional AI features

Dosy includes optional AI features — “Discover” stack search and the “AI Coach”. These only send data when you actively use them:

Discover search: the text you type (e.g. “Huberman routine”) is sent to our backend and on to our AI provider to generate a suggested stack.
AI Coach: an aggregated, non‑identifying snapshot of your stack and self‑tracked metrics (e.g. “Sleep avg 3.6/5, trending up”) is sent to generate observations. Your name and free‑text notes are not included.

These requests are processed by our backend (Vercel) and by DeepSeek, our AI provider, under their terms. If you never use these features, no such data is sent. Please don’t enter information into AI features that you don’t want processed by a third‑party model. AI output is informational only and may be inaccurate — it is not medical advice.

4. Location (optional)

If you enable “Remind me at a place”, Dosy uses your location only on your device to recognize when you arrive at a place you save (such as Home or the gym) and remind you about pending doses. Your location is processed entirely on‑device for geofencing; it is not transmitted to us or anyone else, and is never used for advertising. You can disable this any time in Settings or iOS Settings, and the feature is off until you turn it on.

5. What we never do

We do not sell, rent, or trade your data.
We do not show ads or use advertising trackers.
We do not build advertising profiles from your data.
We do not access your on‑device or iCloud health data.

6. Third‑party services

Apple — iCloud sync and HealthKit (Privacy Policy).
Vercel — hosting of our website and lightweight backend (Privacy Policy).
Upstash — storage for anonymous analytics counters.
DeepSeek — AI provider for optional Discover/Coach features (deepseek.com).

7. Your rights & control

Access & portability: export all of your data to CSV at any time from within the app.
Deletion: “Erase everything” wipes your local database and the iCloud copy. Deleting the app removes on‑device data.
Opt‑out: turn analytics off in Settings; disable AI and location features at any time.
Depending on where you live (e.g. under GDPR or the CCPA/CPRA), you may have rights to access, correct, delete, or restrict processing of personal data. Because your regimen data never reaches us, most of these rights you exercise directly in the app; for anything else, contact us below.

8. Children

Dosy is intended for adults and is not directed to anyone under 18. We do not knowingly collect data from children.

9. Security & international transfers

We use reputable providers and reasonable safeguards. Our backend providers may process the limited, non‑identifying data described above on servers located in the United States or other countries; by using AI/analytics features you understand this data may be processed internationally.

10. Changes

We may update this policy as the app evolves. Material changes will be reflected by the “Last updated” date above and, where appropriate, surfaced in the app.

11. Contact

Questions about privacy? Email support@getdosy.app.