Privacy Policy - Dose Track

This Privacy Policy describes how Ethen Amezquita, an individual developer based in Nevada, United States, doing business as Dose Track ("we," "our," or "us"), collects, uses, and protects your information when you use our mobile application (the "App"), our website, and the in-app Community. Your use of Dose Track is also governed by our Terms of Service.

The short version: the health records you keep in Dose Track live on your device, not on our servers. A few things do leave your device — content you deliberately post to the Community, data sent to power the AI features while they run, files you choose to import from another app, pseudonymous usage analytics, and, if you create an account, your email address. If you turn on cloud backup or move your data to a new phone, your records are encrypted on your phone with your password before they are uploaded, so we store them but cannot read them. Each is explained below.

1. Information We Collect

Dose Track collects the following types of information:

Medication Data: Information about your medications, including medication type, dosage, injection site, injection type, date and time of injections, pain level, and personal notes. The app supports multiple medications and treatment protocols. This is stored on your device.
Health Metrics: Weight, BMI, calories, protein intake, wellbeing check-ins, and side effects that you choose to log. You can track metrics for any date, not just today. This is stored on your device.
Bloodwork Data: Lab results that you upload as a PDF or an image (PNG, JPEG, WEBP, HEIC). To read the values out of the document, the file is sent over an encrypted connection to our server and passed to Anthropic's Claude AI for extraction. The file is held in memory only for the length of that request — it is not written to our database and is not stored by us afterwards. The extracted values are returned to your device and stored there. You can edit extracted values and add custom markers.
Protocol Data: Treatment protocols you create, including medication schedules, dose frequencies, and protocol-specific notes. Stored on your device.
Vial and Inventory Data: Vials, concentrations, reconstitution details, and remaining amounts. Stored on your device.
User Preferences: Settings such as measurement units, notification preferences, medication schedules, starred medications, dashboard configurations, and UI theme preferences. Stored on your device.
Apple Health / Health Connect Data: If you grant permission, the app can read weight, dietary energy, protein, body fat percentage, lean body mass, resting heart rate, heart rate variability, blood pressure, body temperature, and sleep from Apple Health (iOS) or Health Connect (Android), and can write weight back. This is optional, requires your explicit consent, and the data stays on your device. You can revoke the permission at any time in your device settings.
Community Content: Anything you post to the Community — chat messages, questions, answers, tips, shared protocols, reviews, feature requests, comments, and any images or short videos you upload — is stored on our servers, because that is the only way other people can see it. See section 4.
Imported Files (optional): If you use Import From Other App in Settings → Data Management, the CSV files you pick are uploaded to our server so they can be read and sorted into Dose Track's format. See "Importing From Another App" in section 5.
Account Information (optional): If you create a Dose Track account, we store your email address, whether you agreed to receive marketing email, and when your account was created. Your password never leaves your device — the app turns it into two keys on your phone: one that proves your password to our server (we store only a hashed version of it) and one that encrypts your data, which we never receive.
Website Email Sign-up (optional): If you enter your email address in the sign-up box on our website, we store it, with the page you signed up on and when, to send you Dose Track updates. To have it deleted, email hello@dosetrack.app.
Encrypted Backups and Device Transfers (optional): If you turn on cloud backup (a Pro feature) or send your data to a new phone, the app packages your records, photos, and settings, encrypts them on your phone with a key protected by your password, and uploads the encrypted file. We store that file but cannot open it, and we never see your password or the key. See section 3.
Subscription Status: Whether your account is free or paid, which product you bought, when it renews or expires, and whether the purchase was a sandbox/TestFlight purchase. We receive this from RevenueCat and the app stores. We never receive your card details.
Referral Program (optional): If you join the referral program or use someone's referral code, the records listed under Referral Program below.
Basic Technical Information: An anonymous device identifier, your platform (iOS or Android), your app version, and your device language, sent alongside usage analytics.

2. How We Use Your Information

We use the information you provide to:

Track your medication injection history across multiple medications and calculate estimated medication levels using pharmacokinetic models
Display progress charts, analytics, and medication level visualizations
Extract test values, dates, and markers from bloodwork documents you upload (see section 5)
Manage treatment protocols and dose schedules
Send you reminders for upcoming doses (if enabled)
Calculate reconstitution values for peptide medications (calculator tool)
Answer your questions in the Pulse AI assistant and generate insights about your own tracked data (see section 5)
Show your posts to other users in the Community, and moderate that community (see section 4)
Give you access to the paid features you have subscribed to
Let you sign in on a new phone and restore your encrypted backup or receive a device transfer
Send you product news, tips, and offers by email — only if you said yes to marketing email in the app, or signed up with your email on our website. In the app you can turn this off at any time in Settings → Account; anyone can also use the unsubscribe link in any email, or email hello@dosetrack.app to have a website sign-up deleted. We do not send marketing email to anyone who has not opted in.
Provide app functionality and improve user experience

Usage Analytics

Website Analytics

Our website collects pseudonymous usage events to improve the site: page views, how long a page was open and how far it was scrolled, and taps on app store badges and links to other websites. Each event includes a persistent visitor ID and a session ID stored in your browser's localStorage and mirrored in a first-party cookie, along with page path, referring page, UTM parameters or ad click identifiers in the link you followed, user agent, and screen width. These events do not include personal information or health data, are tied to a visitor ID (not your name or email), and are never shared with third parties. You can clear your visitor ID at any time by clearing site data (localStorage and cookies) for this site.

Our website also loads two ad measurement pixels for our ChatGPT advertising: the OpenAI Ads measurement pixel, and the pixel of Gravity, the ad partner that runs some of our ChatGPT ads. Their job is to recognise visitors who arrived from one of those ads and report that an ad led to a visit or a tap on an app store button, so we can tell which advertising is worth paying for. To do that they set cookies on this site (a click identifier, and for Gravity a session cookie), record the pages you view and links you tap on our website, and Gravity may also use characteristics of your browser and device to recognise a returning visitor. They run only on our website, never inside the app, and never receive the doses, medications, lab results or other health data you keep in Dose Track. You can block them with any standard tracker blocker or by blocking cookies for this site.

In-App Analytics

The app records which features are used and how often, so we can find crashes and see what is worth building. Each event is sent with a random anonymous identifier generated on your device, plus your platform (iOS or Android), your app version, and your device language. These events:

Do not include your name, email, health data, doses, lab values, or the content of anything you write
Are tied to a random device identifier, not to your real identity — we cannot work out who you are from them
Are pseudonymous rather than fully anonymous: the same identifier is what links your device to your subscription status and to your Community profile, so records about one device can be connected to each other
Are encrypted in transit and at rest
Are not sold or shared with advertisers or data brokers

There is no button in the app that deletes analytics. To have your analytics records deleted, copy your ID from Settings → Advanced → App User ID and email it to hello@dosetrack.app, and we will delete the events and the record tied to that ID.

The app includes Meta's App Events SDK. On every install it tells Meta that the app was installed and opened, and that you finished setup, along with your device type, OS and app version, and (on Android, unless you have opted out of ads personalisation) your device's advertising ID. On iOS we do not ask to track you, so your advertising identifier is never shared, and Meta measures our ads through Apple's SKAdNetwork and Aggregated Event Measurement. Nothing about your health, medications, doses, protocols or lab results is ever sent to Meta.

Ad Measurement (Android installs from Meta ads only)

If you install the Android app by tapping one of our ads on Facebook or Instagram, the Google Play link carries Meta's ad click identifier and your website visitor ID into the app, so we can tell which ad led to the install. In that case only, the app also gives RevenueCat that click identifier and your device's Google advertising ID, and RevenueCat tells Meta when you start a free trial or a paid subscription, with the product and price. Meta uses this to report which of our ads lead to subscriptions and to show our ads to people more likely to subscribe. Meta handles it under its own privacy policy. Likewise, if you reach Google Play from one of our ChatGPT ads that Gravity runs, the link carries Gravity's ad click identifier and your website visitor ID into the app; we use them only on our own servers to count which ads lead to installs and subscriptions. The Google Play links on our website's store buttons also carry your website visitor ID (and Gravity's ad click identifier, if you arrived from one of those ads) into the app, for the same purpose.

Nothing about your health, doses, protocols, or lab results is ever sent
If you have deleted your advertising ID or opted out of ads personalisation in your Android settings, the app does not read it

3. Data Storage and Security

Where your information lives:

On your device: Your health records — doses, protocols, vials, metrics, wellbeing check-ins, notes, and extracted lab values — are stored in the app's local database on your phone. We do not keep a copy of them on our servers and we cannot read them.
On our servers: Content you post to the Community, the images and videos you upload there, moderation records, your subscription status, pseudonymous usage analytics, and — only if you create an account — your email address, your marketing email choice, and any encrypted backup or device transfer you upload. If you signed up with your email on our website, that email address, the page you signed up on, the consent wording you saw, and when. If you use Import From Other App, also the files you uploaded (until they are deleted) and the import record described in section 5. If you join the referral program or use someone's referral code, also the records listed under Referral Program below. Nothing else.
In your own device backup: If you back your phone up to iCloud or to Google, the app's local database, settings, and photos can be included in that backup, under your own account. We have no access to it. On Android, Dose Track only allows its data into a Google backup when Google can encrypt it end to end with your screen lock (PIN, pattern, or password); on phones without a screen lock, or on Android 8, the app's data is left out. You control this in your device's backup settings.

Your Account and Encrypted Backups

End-to-end encrypted: Backups and device transfers are encrypted on your phone (AES-256) with a key that is itself locked by your password (Argon2id). Only someone with your password can decrypt them. We cannot read them, we cannot hand a readable copy to anyone, and we never share or sell them.
Your password is the key: Because we never have your password, we cannot reset it or recover your backup if you forget it. You can change your password while signed in; your backup stays readable. If you lose your password, we can delete the account at your request so you can start again, but the old backup cannot be recovered.
Cloud backup is a Pro feature: While you are subscribed, the app backs up automatically about once a day. Restoring a backup is free and always available.
If your Pro subscription ends: backups stop and your last backup is frozen. We keep it for 90 days so you can still restore it, then delete it permanently. If you resubscribe within those 90 days, backups resume.
Device transfers: Sending your data to a new phone is free. The encrypted transfer is deleted as soon as your new phone receives it, or after 24 hours, whichever comes first.
Deleting: You can delete your backup, or your whole account, in Settings → Account at any time. Deletion takes effect immediately and also removes any pending transfer. Data on your phone is not affected.

Data sent between the app and our servers is encrypted in transit using TLS. Data we hold on our servers is encrypted at rest. Access to our servers is restricted to the people who operate the service.

No system is perfectly secure. If a breach ever affects information we hold, we will tell affected users and any regulator we are required to notify, as promptly as we reasonably can.

Note for users of older versions: earlier versions of Dose Track offered iCloud sync via CloudKit. That has been replaced with on-device storage. If you migrated from that version, your data was moved to local storage on your device.

4. The Community and User Content

The Community is the part of the app where you can talk to other people. It works differently from the rest of Dose Track, so read this section carefully.

What we store: Anything you post — chat messages, questions, answers, tips, shared protocols, reviews, feature requests, comments, votes and likes, and any images or short videos you upload — is stored on our servers, along with the time you posted it and the display name you posted it under.
Images and video: Media you upload to the Community is stored on our servers and served from a public URL with an unguessable filename. Anyone with the link can view it. Please do not upload anything you would not want another user to see, and be careful with photographs — check the background, and be aware that a picture of a vial, a label, a lab report, or a prescription can identify you or reveal more than you intended.
Your identity: Posts show the name you enter when you post (the app fills in your profile name for you). There is no option to post anonymously: every post is linked to your device's anonymous identifier, so other members can report it or block you, and moderators can act on it. If you leave the name blank, or for posts made in older versions that offered anonymous posting, the post shows "Anonymous". We do not publish your real name, your email, or your device identifier. Other users cannot see them.
Nothing here is private. The Community is a public space inside the app. Treat everything you post there as public and permanent, including anything you say about your own health.
Moderation records: When you report content or block a user, we store that report or block so it can be acted on. We keep an audit record of moderation actions (mutes, bans, removals) so those decisions can be reviewed later.
Age: The Community is for adults only — you must be 18 or older. The app asks your age before letting you in and stores your answer on your device.
Deleting Community content: You cannot delete a post yourself in the app; only moderators can remove posts. But you can ask: email hello@dosetrack.app, tell us which posts (or ask for all of them), and we will delete them. For someone else's post, long-press it to report it, or block the person who posted it. Copies may remain briefly in backups and moderation records, and other users may already have seen or saved what you posted.

5. AI Features and What They Send

Dose Track has several AI-powered features: the Pulse assistant, bloodwork extraction from documents you upload, generated insights about your data, and importing records from another app. These cannot run on your phone alone, so they send data out. Here is exactly what happens:

Bloodwork extraction: The lab document you upload is sent over an encrypted connection to our server and passed straight to Anthropic's Claude AI, which reads the values out of it. The document is held in memory for the length of the request and is not saved to our database.
Pulse and generated insights: For Pro members, each day you open Pulse it writes a short briefing from your tracked data. Pulse also answers the questions you ask. Both send the same slice of your own tracked data (with your question, when you ask one). This can include your dose history, lab history, symptoms and side effects, protocols, schedules, and weight history. It goes to our server and on to Anthropic's Claude AI so the briefing or answer can be produced, and the result comes back to your device. This data is processed to produce the briefing or answer and is not written into a health database on our servers.
Importing From Another App: When you use Import From Other App, the CSV files you pick are uploaded over an encrypted connection to our server and stored there encrypted while the import runs. To work out how your old app laid out its data, our server sends Anthropic's Claude AI the column names and a sample of rows from each file. The full files are then sorted on our server and the result is sent back to your phone for you to review. The uploaded files are deleted as soon as you finish or cancel the import; if you do neither, they are deleted automatically about 24 hours after upload. A record of the import, including the sorted result shown on the review screen, stays in our database after the files are gone. Email hello@dosetrack.app with your App User ID (Settings → Advanced) to have it deleted.
What Anthropic does with it: Data sent to Anthropic is used solely to produce the response for that request. It is not used to train Anthropic's models. Anthropic's own handling of API data is governed by its terms.
What we keep: We record the size and cost of AI requests (token counts) so we can manage spend, and short-lived job records while a lab analysis is running, which expire automatically. We do not keep a log of your Pulse conversations.
What keeps your data away from the AI: Pro members can turn the daily briefing off in Settings. On the free plan, or with the briefing off, nothing is sent to the AI unless you ask Pulse something, upload a lab document, or import files from another app. If you do none of those, none of your health data leaves your device for AI processing.

AI output can be wrong. Always check extracted lab values against the original document, and never treat an AI answer as medical advice.

Referral Program

The Dose Track referral program is optional and runs mainly through a Telegram bot. If you join it, or if you use someone's referral code in the app, we keep these records on our servers:

About referrers: your Telegram user ID, username, and first name; your referral code; the payout name and email you give us; when you accepted the program terms; and any messages you send the referral bot. For creators, also the name, handle, and photo shown on their invite page.
Rewards and payouts: every reward you earn, every payout and every grant of Pro time you ask for, and what happened to each one. When Pro time is added to an account, the record of that grant keeps the account's App User ID.
Friends who use a code: the friend's anonymous App User ID, which code they used, their plan, their payments, and whether they started a trial, cancelled, or got a refund. Never their name, email, or health data.
Link clicks: how many times each invite link is opened, and on what kind of device (iPhone, Android, or other). Nothing else about the visitor is saved with the click, not even their IP address.

Why we keep them: to know which code a friend used, work out and pay rewards, send payouts, add Pro time, answer your messages, and catch fraud.

How long: while the referrer is in the program, and for 7 years after their last payout.

If a friend deletes their account: deleting a Dose Track account does not remove referral records, because they hold only anonymous IDs.

Deleting or getting a copy: email hello@dosetrack.app and we will delete your referral records or send you a copy of them. We do this by hand.

6. Third-Party Services

Dose Track uses the following third-party services:

Anthropic (Claude AI): For bloodwork extraction, the Pulse assistant, generated insights, and reading files you import from another app. See section 5 for exactly what is sent.
RevenueCat: Manages your subscription entitlement across iOS and Android and tells our servers whether your account is free or paid. It receives an anonymous identifier and purchase information — never your health data.
Apple App Store / Google Play: Process your payment and manage your subscription. They handle your payment details; we never see them.
Apple Health (iOS, optional) and Android Health Connect (optional): For reading and writing the health metrics listed in section 1. This data stays on your device. You can grant or revoke the permission at any time.
Telegram (referral program only): The referral program runs through a Telegram bot, so Telegram carries the messages between you and the bot under its own privacy policy.
Our hosting and database providers: Run the servers that store Community content, uploaded media, analytics, account emails, website sign-up emails, and encrypted backups on our behalf. They act as our processors and do not use your data for their own purposes.
OpenAI Ads measurement pixel (website only): Measures visits from ChatGPT advertising. It runs on our website only, never in the app.
Gravity pixel (website only): Measures visits from our ChatGPT ads that Gravity runs for us, using cookies, the pages viewed and links tapped on our website, and browser and device characteristics. It runs on our website only, never in the app, and receives no health data from the app.
Meta (App Events SDK, all installs; RevenueCat purchase reporting for Android installs from Meta ads): Receives, through RevenueCat, the ad click identifier, advertising ID, and trial or subscription purchase for installs that came from one of our Facebook or Instagram ads. See "Ad Measurement" in section 2.

We do not sell your data. We do not share it with data brokers. The only thing an advertiser receives is the ad measurement described in section 2, and never any health data. We do not use your health data for advertising.

7. Your Rights

You have the right to:

Access Your Data: Your health data is stored on your device and is accessible within the app.
Delete Your Data: You can delete individual records or all data through the app settings. Deleting the app removes all local data. Note that Delete Account & Data in Settings → Data Management only erases the data on your phone; it does not delete your Dose Track account. To have your Community posts, analytics records, or import records removed, email us (include your App User ID from Settings → Advanced for analytics and imports). You can delete your account, and with it your email address and any encrypted backup, in Settings → Account; it is removed immediately. Without the app, see how to delete your account.
Export Your Data: You can export your data through the app's export functionality, as a file that includes your records, photos, and settings.
Marketing Email: Marketing email is off unless you choose to receive it. You can turn it off at any time in Settings → Account or with the unsubscribe link in any email.
Edit Bloodwork Data: You can edit any extracted bloodwork values or add custom markers at any time.
Opt-Out: You can revoke Apple Health (iOS) or Health Connect (Android) access at any time, and you can simply not use the AI features or the Community.
Correct or Object: Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA — including the right to correct your information, to object to certain processing, or to complain to a data protection authority. Email us and we will help.

To exercise any of these, email hello@dosetrack.app. We will respond within 30 days.

8. Children's Privacy

Dose Track is not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13. The Community is restricted to users aged 18 and over. If you believe a child has provided us with information, contact us and we will delete it.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions about this Privacy Policy, want your Community content removed, or want to exercise any of the rights in section 7, please contact us:

Email: hello@dosetrack.app