Privacy Policy

Introduction

Using Dosia means your personal treatment data resides strictly on your own device. We take this responsibility seriously.

Dosia is a health-tracking companion, and we strictly follow data minimization principles. Estimates remain estimates, and records remain records. Dosia does not prescribe, diagnose, or recommend dosage changes.

This Privacy Policy explains what information is processed, our security practices, and how to reach us.

Scope

Key terms (plain English)

• Health data: Information about your health that you enter or import into the app (for example, injections, side effects, weight, nutrition).
• On-device storage: Your treatment records are saved locally on your device to power the core tracking and review features.
• Anonymous experience data: Analytics data we design to ensure anonymity so it is not intended to be reasonably linkable back to you. We use it only to create aggregated summaries and trends.
• Aggregated trend analysis: Looking at patterns across groups of users (for example, counts, averages, distributions), not individual records.

What we collect (and why)

Account information

Dosia does not require an account. We do not ask for your name, email, phone number, or password to use the core application. If you reach out to customer support, we receive your email address solely to answer your inquiry.

Health data (on-device only)

If you choose to track your treatment in Dosia, you may enter:

• GLP-1 dose records (date, time, dose, site, medication)
• Side effects, severity, duration, and notes
• Weight and related body measurements
• Reminders and treatment-plan parameters

Storage: This information is stored 100% locally on your iPhone sandbox storage. Dosia does not transmit your personal health entries to external servers.

Anonymous experience data (optional)

With your consent, Dosia may collect anonymous experience data to help us understand broader stability trends and improve reliability. We do not collect: name, email, phone, Apple ID, advertising identifiers (IDFA), IP address, precise location, or free-text notes.

Examples include aggregate signals such as:

• Aggregate feature usage statistics
• Crash frequencies and technical reliability signals
• General application and OS version telemetry

Device & technical information

We and our infrastructure providers may receive limited diagnostic information such as device model, OS version, app build number, and crash stacks.

Why? To maintain application stability, security, and performance.

Data storage

Data retention

Your privacy rights

Because Dosia does not maintain user accounts or store personal treatment records on cloud servers, we do not hold your individual health entries on our backend.

You retain complete, autonomous control over your local device data: you can edit, clear, or purge all local records directly within the app, or completely remove all local data by deleting the Dosia app from your iPhone.

Legal bases (EEA, UK, and applicable regions)

Where applicable data protection laws require a legal basis for processing, we rely on:

• Contract: To deliver the core local tracking capabilities of the application.
• Legitimate interests: To maintain app stability, resolve crash reports, and safeguard security.
• Consent: For optional anonymous analytics. You can disable telemetry in settings at any time.
• Legal obligations: To comply with applicable laws and lawful regulatory requests.

Who we share data with (and why)

We share limited technical diagnostic data strictly with service providers that help us maintain app stability under binding data protection terms:

• Crash & Performance Providers: Crash telemetry and diagnostic logs used to fix system bugs.
• Analytics Providers: De-identified, aggregated usage metrics.
• Support Providers: Managing direct customer support emails that you voluntarily send to us.

Support correspondence

If you email us, we use your message details solely to address your question. Sensitive health inquiries are handled with strict confidentiality.

Legal requirements

We may disclose information if formally mandated by law or court order, or when necessary to protect personal safety and legal rights.

Business transactions

If Dosia is involved in a merger, reorganization, or asset sale, operational assets may transfer subject to this policy.

Security

Because your treatment records reside 100% locally on your device, they benefit directly from iOS sandbox isolation and hardware-level encryption.

International data transfers

Limited technical diagnostic telemetry and support emails may be processed in the United States or other provider locations under appropriate safeguards such as Standard Contractual Clauses (SCCs).

Children’s privacy

Dosia is not directed to children, and we do not knowingly collect personal information from children.

Policy changes

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page.

Contact us

If you have questions about this Privacy Policy, please contact us at support@lumalabs.tech.