Privacy Policy

1. Introduction

This Privacy Policy describes how Doses ("we," "our," or "us") collects, uses, and protects your information when you use our health tracking application. We are committed to protecting your privacy and ensuring the security of your personal health information.

2. Information We Collect

2.1 Personal Information

We collect the following types of personal information:

• Account Information: Email address, name (first and last name)
• Health Data: Weight measurements, medication doses, drug information, dates and times of entries
• Profile Information: Preferred weight units, goal weights, onboarding preferences
• Usage Data: How you interact with the application, features used, time spent in the app

2.2 Automatically Collected Information

• Device information (device type, operating system, browser type)
• IP address and general location information
• Application usage patterns and performance data
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your information for the following purposes:

• Service Provision: To provide and maintain the Doses application and its features
• Data Visualization: To create charts, graphs, and reports of your health data
• Account Management: To manage your account, authenticate users, and provide customer support
• Improvement: To analyze usage patterns and improve our application
• Communication: To send you important updates about the service
• Analytics: To understand how users interact with our application (using services like PostHog)

4. Data Storage and Security

4.1 Data Storage

Your data is stored securely using Supabase, a trusted cloud database service. All data is encrypted in transit and at rest using industry-standard encryption protocols.

4.2 Security Measures

• End-to-end encryption for sensitive health data
• Secure authentication using industry-standard protocols
• Regular security audits and updates
• Access controls and monitoring
• Secure backup and disaster recovery procedures

5. Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal health information to third parties, except in the following limited circumstances:

• Service Providers: We may share data with trusted third-party service providers who assist us in operating our application (e.g., Supabase for data storage, PostHog for analytics)
• Legal Requirements: We may disclose information if required by law or to protect our rights and safety
• Consent: We may share information with your explicit consent
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the transaction

6. Third-Party Services

We use the following third-party services:

• Supabase: For database storage and authentication
• PostHog: For application analytics and user behavior tracking
• Google OAuth: For user authentication (if you choose to sign in with Google)

These services have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of these third-party services.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Opt-out: Opt out of certain data processing activities
• Account Deletion: Delete your account and all associated data

To exercise these rights, please contact us through the application or using the contact information provided below.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. When you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes.

9. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place to protect your information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

• Through the application's contact or support features
• By email (if you have provided contact information)