Privacy Policy

1. Who is responsible for your information

Dosefold is designed and operated by Bo Chen, an independent developer (“we”, “us” or “our”). We are the controller of the personal information described in this policy, except where a third-party service processes information for its own purposes as described below.

Privacy questions and requests can be sent to 1436588172@qq.com. Please include enough information for us to understand your request and verify that you are the person concerned. We will not ask you to send your medication records or Apple Health data by email.

If you are in the European Economic Area (“EEA”), the United Kingdom (“UK”) or Switzerland, and a local representative is required by applicable law, contact us and we will provide the relevant representative details. This policy is intended to describe our current practices; it is not a claim that every local formality is complete for every jurisdiction.

2. Information stored locally on your device

Dosefold is local-first. The following information is stored in the application’s private storage on your iPhone and is not sent to us merely because you use the application:

• Medication definitions, plans, reminders, actual dose records, notes, injection site, date, time and time zone.
• Meals, food portions, nutrition values, meal times, water records and saved food definitions.
• Manual weight measurements, goals, unit preferences, reporting time zone and app settings.
• Selected Apple Health weight and step values that you authorise the app to read.
• Personal food photos saved inside the app’s managed storage.
• Optional FoodScan draft data, including a selected photo, candidate text and the date or time zone you selected, until you clear it or submit it.
• Exported files that you create and save through the iOS share sheet or Files.

This local information is protected by iOS app sandboxing and the device protections you enable. We do not operate a server that receives or stores your journal, and there is no account or cloud sync. If you delete the application or use “Clear local data”, the relevant local information may be permanently removed from that device. Export anything you need to keep.

3. Optional FoodScan

FoodScan is an optional feature that you choose to use. It is not required for medication, food, water, weight or goals. When you choose to analyse a photo or description, the app may send the following to our FoodScan service:

• The selected meal photo, with location and capture metadata removed, or the text you enter or dictate.
• Any note you add and your locale.
• A device-specific installation identifier and public key used to authenticate requests, enforce abuse limits and support consistent retries.
• Technical request information needed to operate and secure the service, such as a request identifier, timestamps and error codes.

The service sends the content to an AI model provider to return candidate foods and estimated nutrition. The service is designed not to save your raw photo, note or transcript, and request logs are designed to exclude that raw content. Returned candidates are kept temporarily so that retries can reuse the same result; they expire after approximately 24 hours. Automatic cleanup is scheduled, but the hosting platform may delay deletion. Barcode results may be reused for up to seven days. Provider-side retention is controlled by the provider’s own terms and is not under our direct control.

FoodScan does not receive your journal, medication, weight, goals or Apple Health records. Nothing is added to your journal until you review and explicitly confirm a candidate. You can use manual entry instead at any time. Do not submit a photo or description that you do not have the right to share, or that contains another person’s sensitive information without their permission.

4. Apple Health

Apple Health access is optional and read-only. If you enable it, Dosefold may read the weight and step information you select in order to display it alongside your records. Dosefold does not write to, modify or delete data in Apple Health. Apple Health data is not sent to our FoodScan service.

You can revoke access at any time in iOS Settings or the Health app. If a refresh returns no data, that may mean there are no readable samples for the selected period, permission is unavailable, or a read failed; it does not automatically mean you denied access. A failed refresh may leave previously read values visible with their last successful time.

5. Notifications, camera, microphone and speech

If you enable reminders, the app schedules local notifications on your device. We do not receive your notification contents. You can disable notifications in iOS Settings or the app; pending reminders may be cancelled when you stop a plan or clear local data.

The camera is used only when you choose to photograph a meal, barcode or medication label. Microphone and speech recognition are used only when you choose voice input. Medication-label OCR and medication speech recognition are designed to run on-device and do not upload the label image or audio. Meal text that you choose to analyse may be sent to FoodScan as described above. System permission prompts are controlled by iOS, and you can change permissions in Settings.

6. Website and technical information

This website is a static information site. We do not set advertising cookies, run behavioural advertising, or include social-media tracking pixels. If you email us, we receive your email address, the contents of your message and any attachments you choose to send. We use that information to respond and to keep a record of the conversation.

Our hosting and content-delivery provider may process standard technical information such as an IP address, browser type, requested page, timestamp and error information in order to deliver the site, protect it from abuse and maintain security. We do not use this website to build advertising profiles. You can control cookies and similar technologies through your browser; the site is designed to work without advertising cookies.

7. Subscriptions and RevenueCat

Dosefold Pro subscriptions are sold through the App Store and processed by Apple. Apple handles payment and your App Store account. To validate and restore entitlements — that is, to determine whether a subscription is active for the app — we use RevenueCat as subscription infrastructure.

When the app checks, makes or restores a purchase, Apple and RevenueCat may process:

• An app user ID. RevenueCat generates a pseudonymous identifier for the app installation or app user. It is not your name, your email address or your Apple Account, and we do not ask you to create an account.
• Purchase and subscription history. The product purchased, purchase, renewal and expiry dates, subscription status, cancellations, billing issues, trial or introductory-offer status, and the store and country of purchase, received from Apple as receipt or transaction information.
• Device and technical data. Information needed to deliver, secure and troubleshoot the entitlement service, such as device model, operating system and app version, request identifiers, IP address, timestamps and error codes.

We use this information to confirm and restore entitlements, prevent fraud and abuse of the subscription system, respond to purchase-related support requests, and meet accounting and legal obligations. We do not receive your full payment-card details, and we do not use purchase information for advertising or sell it.

RevenueCat processes this information on our behalf as a service provider under contractual data-protection terms and its own privacy policy, available at revenuecat.com/privacy. Apple processes payment and App Store account information under Apple’s privacy policy as an independent controller; we do not control Apple’s own processing. If you never purchase a subscription, there is no subscription purchase history to validate, although limited technical data may still be processed when the app checks entitlement status.

Entitlements are tied to the Apple Account used for purchase. If you reinstall the app or change device, you can restore an active subscription using “Restore Purchases” while signed in with the same Apple Account. Deleting the app does not cancel a subscription; cancellation is handled in your Apple Account settings, as described in the Terms of Use. Withdrawing consent to optional processing does not affect purchases you have already made. See “Your privacy rights” below for access, deletion and objection requests.

8. Why we process information and our legal bases

Where the EU or UK GDPR applies, we rely on the following legal bases:

• Performance of a contract or steps at your request: to provide the app features you choose, maintain your local records, process an export you request, and respond to support requests.
• Consent: for optional FoodScan processing, optional Apple Health access, optional notifications, camera, microphone and speech permissions. You can withdraw consent at any time, though withdrawal does not affect processing that already occurred.
• Legitimate interests: to secure and improve the app and website, prevent abuse, enforce rate limits, diagnose failures, and protect our legal rights. We balance these interests against your rights and freedoms.
• Legal obligation: to comply with applicable law, lawful requests from competent authorities, tax or accounting requirements, and to establish or defend legal claims.

Where the GDPR does not apply, we process information for the purposes described in this policy and in accordance with applicable local law. We do not use your health information for advertising, eligibility, insurance, employment or credit decisions.

9. Sharing and disclosure

We do not sell your personal information. We do not share it for cross-context behavioural advertising. We do not rent, trade or otherwise make your journal available to advertisers or data brokers.

We may disclose limited information in the following circumstances:

• Service providers: to a hosting, content-delivery, security, communications, subscription-infrastructure or AI provider that helps operate the app or website, subject to appropriate contractual and security measures and only for the purposes described in this policy. RevenueCat is our subscription-infrastructure provider (see section 7).
• Legal and safety: when we believe in good faith that disclosure is required by law, legal process or a competent authority, or is necessary to protect the rights, safety or security of users, the public or us.
• Business transfer: in connection with a merger, acquisition, reorganisation, sale of assets or similar transaction, subject to appropriate confidentiality protections and, where required, notice to you.
• With your direction: when you ask us to share information, for example through the iOS share sheet or a support conversation.

FoodScan requests are processed by our hosting and AI providers as service providers for the purpose of returning candidates. Those providers may process technical information under their own terms and may retain limited operational logs for security and abuse prevention. We do not authorise them to use your content for advertising.

10. International transfers

Dosefold is available internationally. Our service providers may process information in countries other than your own, including the United States and other countries where they operate. Where required, we use appropriate safeguards for transfers from the EEA, UK or Switzerland, such as standard contractual clauses or an equivalent lawful transfer mechanism. The legal and security protections in a destination country may differ from those in your country.

If you use FoodScan, the selected content may be transferred to an AI provider outside your country. Do not use FoodScan if you are not comfortable with that transfer. Manual journaling remains available without it.

11. How long we keep information

Local journal data remains on your device until you edit or delete it, clear local data, delete the application, or the operating system removes it. We do not have a server copy to restore it.

Optional FoodScan candidate results expire for retries after approximately 24 hours. Barcode results may be reused for up to seven days. Automatic cleanup is scheduled, but hosting-platform delays, backups or provider retention may affect the exact timing. We do not promise immediate physical erasure from every provider system. Support emails are kept for as long as needed to resolve the request, maintain business records and comply with legal obligations.

Where a legal claim, security incident or legal obligation requires preservation, we may retain limited information for the period necessary to address it. When information is no longer needed, we take reasonable steps to delete or de-identify it.

12. Security

We use reasonable technical and organisational measures designed to protect information, including HTTPS for network requests, app sandboxing, local file protection, request authentication and rate limits, and minimisation of the content sent to FoodScan. No method of transmission or storage is completely secure, and no system can guarantee absolute security.

You are responsible for protecting your device passcode, Apple Account and local backups. If you believe your device or a support conversation has been compromised, contact us promptly. Do not send us your device passcode, Apple Account password, two-factor codes, payment-card details or full medical records.

13. Your privacy rights

Depending on where you live, you may have some or all of the following rights:

• Access the personal information we hold about you and obtain a copy.
• Correct inaccurate personal information.
• Delete personal information, subject to legal exceptions.
• Restrict or object to certain processing, including processing based on legitimate interests.
• Portability of information you provided, in a structured, commonly used format.
• Withdraw consent at any time for processing based on consent, such as optional FoodScan, Health access or permissions.
• Opt out of the sale or sharing of personal information, or of targeted advertising. We do not sell personal information or share it for cross-context behavioural advertising.
• Non-discrimination for exercising your privacy rights.
• Complain to your local data-protection authority or supervisory authority.

To exercise a right, email 1436588172@qq.com with the subject “Privacy request”. We may need to verify your identity. We will not ask for more information than is reasonably necessary. We aim to respond within the time required by applicable law, generally within 30 days for GDPR requests and 45 days for CCPA/CPRA requests, with an extension where permitted. If we cannot fulfil a request, we will explain why, subject to legal limits.

You may use an authorised agent where local law permits. We may require proof of authorisation and may still need to verify your identity. If you are in the EEA or UK, you also have the right to lodge a complaint with your local supervisory authority. If you are a California resident, you can find the categories of information we collect and disclose in the table below.

14. California and similar U.S. state disclosures

In the past 12 months, Dosefold may have collected the following categories of personal information, depending on how you use the app:

• Identifiers: a device-specific scan installation identifier and public key when you use FoodScan; your email address if you contact us.
• Commercial information: subscription product, status and renewal information received from Apple and RevenueCat if you purchase Dosefold Pro, or limited support information if you contact us. We do not receive full payment-card details.
• Internet or network activity: technical request information processed by hosting and security providers.
• Geolocation: we do not collect precise device location. Your locale may be sent with a FoodScan request.
• Sensory information: a meal photo, label photo or voice-derived text only when you choose the relevant feature.
• Health information: journal values and optional read-only Apple Health weight or steps remain on your device; optional FoodScan requests do not include them.
• Inferences: candidate food estimates generated for a request you initiate; these are not used for advertising.
• Sensitive personal information: health-related journal content is sensitive. It is stored locally and is not used to infer characteristics for advertising. We do not sell or share it for cross-context behavioural advertising.

We disclose the categories above only for the business purposes described in this policy, to service providers and as required by law. We do not knowingly sell or share personal information of consumers under 16. You can submit a request to know, delete, correct or opt out using the contact details above.

15. Children

Dosefold is not directed to children. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA or UK). The app does not require an account or a birth date. If you believe a child has provided personal information to us, contact us and we will take appropriate steps to delete it. Parents and guardians should supervise any use by a minor where local law requires it.

16. Do Not Track and Global Privacy Control

This website does not use advertising trackers or cross-site behavioural advertising. Because it is a static site without advertising profiles, there is no separate “Do Not Track” response required for advertising. If your browser sends a Global Privacy Control signal, we do not use it to enable sale or sharing because we do not sell or share personal information for those purposes. You can still contact us to exercise your rights.

17. Changes to this policy

We may update this policy to reflect changes in the app, our providers or legal requirements. The revised version will be posted on this page with a new effective date. If a change materially affects how we handle your information, we will provide reasonable notice in the app or by another appropriate method before the change takes effect, where required by law.

18. Contact and complaints

For privacy questions, requests or complaints, contact:

Bo Chen — Dosefold
Email: 1436588172@qq.com

We will review your message and respond as soon as reasonably possible. If you are not satisfied with our response, you may contact your local data-protection authority. In the UK, that is the Information Commissioner’s Office; in the EEA, your local supervisory authority. In California, you may contact the California Privacy Protection Agency or the Attorney General’s office.