Privacy Policy - Dose Track

This Privacy Policy describes how Ethen Amezquita, an individual developer based in Nevada, United States, doing business as Dose Track ("we," "our," or "us"), collects, uses, and protects your information when you use our mobile application (the "App"), our website, and the in-app community we call the Hub. Your use of Dose Track is also governed by our Terms of Service.

The short version: the health records you keep in Dose Track live on your device, not on our servers. Three things do leave your device — content you deliberately post to the Hub, data sent to power the AI features while they run, and pseudonymous usage analytics. Each is explained below.

1. Information We Collect

Dose Track collects the following types of information:

Medication Data: Information about your medications, including medication type, dosage, injection site, injection type, date and time of injections, pain level, and personal notes. The app supports multiple medications and treatment protocols. This is stored on your device.
Health Metrics: Weight, BMI, calories, protein intake, wellbeing check-ins, and side effects that you choose to log. You can track metrics for any date, not just today. This is stored on your device.
Bloodwork Data: Lab results that you upload as a PDF or an image (PNG, JPEG, WEBP, HEIC). To read the values out of the document, the file is sent over an encrypted connection to our server and passed to Google Gemini for extraction. The file is held in memory only for the length of that request — it is not written to our database and is not stored by us afterwards. The extracted values are returned to your device and stored there. You can edit extracted values and add custom markers.
Protocol Data: Treatment protocols you create, including medication schedules, dose frequencies, and protocol-specific notes. Stored on your device.
Vial and Inventory Data: Vials, concentrations, reconstitution details, and remaining amounts. Stored on your device.
User Preferences: Settings such as measurement units, notification preferences, medication schedules, starred medications, dashboard configurations, and UI theme preferences. Stored on your device.
Apple Health / Health Connect Data: If you grant permission, the app can read weight, dietary energy, protein, body fat percentage, lean body mass, resting heart rate, heart rate variability, blood pressure, body temperature, and sleep from Apple Health (iOS) or Health Connect (Android), and can write weight back. This is optional, requires your explicit consent, and the data stays on your device. You can revoke the permission at any time in your device settings.
Community Hub Content: Anything you post to the Hub — chat messages, questions, answers, tips, shared protocols, reviews, feature requests, comments, and any images or short videos you upload — is stored on our servers, because that is the only way other people can see it. See section 4.
Subscription Status: Whether your account is free or paid, which product you bought, when it renews or expires, and whether the purchase was a sandbox/TestFlight purchase. We receive this from RevenueCat and the app stores. We never receive your card details.
Basic Technical Information: An anonymous device identifier, your platform (iOS or Android), your app version, and your device language, sent alongside usage analytics.

2. How We Use Your Information

We use the information you provide to:

Track your medication injection history across multiple medications and calculate estimated medication levels using pharmacokinetic models
Display progress charts, analytics, and medication level visualizations
Extract test values, dates, and markers from bloodwork documents you upload (see section 5)
Manage treatment protocols and dose schedules
Send you reminders for upcoming doses (if enabled)
Calculate reconstitution values for peptide medications (calculator tool)
Answer your questions in the Pulse AI assistant and generate insights about your own tracked data (see section 5)
Show your posts to other users in the Community Hub, and moderate that community (see section 4)
Give you access to the paid features you have subscribed to
Provide app functionality and improve user experience

Usage Analytics

Website Analytics

Our website collects pseudonymous usage events (page views, feature clicks) to improve the site. Each event includes a persistent visitor ID stored in your browser's localStorage, along with page path, UTM parameters, user agent, and screen width. These events do not include personal information or health data, are tied to a visitor ID (not your name or email), and are never shared with third parties. You can clear your visitor ID at any time by clearing localStorage for this site.

Our website also loads the OpenAI Ads measurement pixel. Its only job is to recognise visitors who arrived from a ChatGPT ad — it stores a click identifier in a first-party cookie and reports that an ad led to a visit, so we can tell which advertising is worth paying for. It runs only on our website, never inside the app, and it never sees any health data. You can block it with any standard tracker blocker or by blocking cookies for this site.

In-App Analytics

The app records which features are used and how often, so we can find crashes and see what is worth building. Each event is sent with a random anonymous identifier generated on your device, plus your platform (iOS or Android), your app version, and your device language. These events:

Do not include your name, email, health data, doses, lab values, or the content of anything you write
Are tied to a random device identifier, not to your real identity — we cannot work out who you are from them
Are pseudonymous rather than fully anonymous: the same identifier is what links your device to your subscription status and to your Hub profile, so records about one device can be connected to each other
Are encrypted in transit and at rest
Are not sold or shared with advertisers or data brokers

You can delete all associated analytics data at any time via Settings → Delete Account & Data → Usage Analytics.

3. Data Storage and Security

Where your information lives:

On your device: Your health records — doses, protocols, vials, metrics, wellbeing check-ins, notes, and extracted lab values — are stored in the app's local database on your phone. We do not keep a copy of them on our servers and we cannot read them.
On our servers: Content you post to the Hub, the images and videos you upload there, moderation records, your subscription status, and pseudonymous usage analytics. Nothing else.
In your own device backup: If you back your phone up to iCloud or to Google, the app's local database can be included in that backup, encrypted and under your own account. We have no access to it. You control this in your device's backup settings.

Data sent between the app and our servers is encrypted in transit using TLS. Data we hold on our servers is encrypted at rest. Access to our servers is restricted to the people who operate the service.

No system is perfectly secure. If a breach ever affects information we hold, we will tell affected users and any regulator we are required to notify, as promptly as we reasonably can.

Note for users of older versions: earlier versions of Dose Track offered iCloud sync via CloudKit. That has been replaced with on-device storage. If you migrated from that version, your data was moved to local storage on your device.

4. The Community Hub and User Content

The Hub is the part of the app where you can talk to other people. It works differently from the rest of Dose Track, so read this section carefully.

What we store: Anything you post — chat messages, questions, answers, tips, shared protocols, reviews, feature requests, comments, votes and likes, and any images or short videos you upload — is stored on our servers, along with the time you posted it and the display name you posted it under.
Images and video: Media you upload to the Hub is stored on our servers and served from a public URL with an unguessable filename. Anyone with the link can view it. Please do not upload anything you would not want another user to see, and be careful with photographs — check the background, and be aware that a picture of a vial, a label, a lab report, or a prescription can identify you or reveal more than you intended.
Your identity: Posts show the display name you chose, or "Anonymous" if you post anonymously. We do not publish your real name, your email, or your device identifier. Other users cannot see them.
Nothing here is private. The Hub is a public space inside the app. Treat everything you post there as public and permanent, including anything you say about your own health.
Moderation records: When you report content or block a user, we store that report or block so it can be acted on. We keep an audit record of moderation actions (mutes, bans, removals) so those decisions can be reviewed later.
Age: The Hub is for adults only — you must be 18 or older. The app asks your age before letting you in and stores your answer on your device.
Deleting Hub content: You can delete your own posts in the app. You can also email us and ask for your Hub content to be removed. Copies may remain briefly in backups and moderation records, and other users may already have seen or saved what you posted.

5. AI Features and What They Send

Dose Track has several AI-powered features: the Pulse assistant, bloodwork extraction from documents you upload, and generated insights about your data. These cannot run on your phone alone, so they send data out. Here is exactly what happens:

Bloodwork extraction: The lab document you upload is sent over an encrypted connection to our server and passed straight to Google Gemini, which reads the values out of it. The document is held in memory for the length of the request and is not saved to our database.
Pulse and generated insights: When you ask Pulse a question, the app sends a slice of your own tracked data along with your question — this can include your dose history, lab history, symptoms and side effects, protocols, schedules, and weight history. It goes to our server and on to Google Gemini so an answer can be produced, and the answer comes back to your device. This data is processed to answer your question and is not written into a health database on our servers.
What Google does with it: Data sent to Gemini is used solely to produce the response for that request. It is not used to train Google's models. Google's own handling of API data is governed by their terms.
What we keep: We record the size and cost of AI requests (token counts) so we can manage spend, and short-lived job records while a lab analysis is running, which expire automatically. We do not keep a log of your Pulse conversations.
Your choice: These features are optional. If you do not use Pulse and do not upload a lab document, none of your health data leaves your device for AI processing.

AI output can be wrong. Always check extracted lab values against the original document, and never treat an AI answer as medical advice.

6. Third-Party Services

Dose Track uses the following third-party services:

Google Gemini (AI): For bloodwork extraction, the Pulse assistant, and generated insights. See section 5 for exactly what is sent.
RevenueCat: Manages your subscription entitlement across iOS and Android and tells our servers whether your account is free or paid. It receives an anonymous identifier and purchase information — never your health data.
Apple App Store / Google Play: Process your payment and manage your subscription. They handle your payment details; we never see them.
Apple Health (iOS, optional) and Android Health Connect (optional): For reading and writing the health metrics listed in section 1. This data stays on your device. You can grant or revoke the permission at any time.
Our hosting and database providers: Run the servers that store Hub content, uploaded media, and analytics on our behalf. They act as our processors and do not use your data for their own purposes.
OpenAI Ads measurement pixel (website only): Measures visits from ChatGPT advertising. It runs on our website only, never in the app.

We do not sell your data. We do not share it with advertisers or data brokers. We do not use your health data for advertising.

7. Your Rights

You have the right to:

Access Your Data: Your health data is stored on your device and is accessible within the app.
Delete Your Data: You can delete individual records or all data through the app settings. Deleting the app removes all local data. You can delete your own Hub posts in the app, and you can email us to have your Hub content and analytics records removed.
Export Your Data: You can export your data through the app's export functionality.
Edit Bloodwork Data: You can edit any extracted bloodwork values or add custom markers at any time.
Opt-Out: You can revoke Apple Health (iOS) or Health Connect (Android) access at any time, and you can simply not use the AI features or the Hub.
Correct or Object: Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA — including the right to correct your information, to object to certain processing, or to complain to a data protection authority. Email us and we will help.

To exercise any of these, email hello@dosetrack.app. We will respond within 30 days.

8. Children's Privacy

Dose Track is not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13. The Community Hub is restricted to users aged 18 and over. If you believe a child has provided us with information, contact us and we will delete it.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions about this Privacy Policy, want your Hub content removed, or want to exercise any of the rights in section 7, please contact us:

Email: hello@dosetrack.app