Dosr-ai-legal

DOSR-AI Privacy Policy

Effective Date: May 27, 2026 Last Updated: June 30, 2026

1. Introduction

This Privacy Policy describes how DOSR-AI (“we,” “us,” or “our”) collects, uses, stores, and protects your information when you use the DOSR-AI mobile application (the “App”) on iOS and Android.

DOSR-AI is published by DOSR AI LLC (“the Publisher”). By using the App, you agree to the practices described in this policy.

We are committed to data minimization: we collect only what is necessary to provide the App’s functionality and explicitly avoid collecting data that is not required.

If you have any privacy-related questions, contact us at dosr.llc@gmail.com.

2. What We Collect

We organize our data collection into three categories: account data, data you create, and technical data.

2.1 Account Data

To create and maintain your account, we collect:

Email address — used for authentication, password reset, and essential account communications.
Password — stored as a one-way cryptographic hash. We never store or have access to your actual password.
User identifier — a unique ID generated by our backend (Supabase) when you sign up.
Subscription status — whether you have a free or paid (DOSR Pro) subscription, managed via RevenueCat.

2.2 Data You Create

These are the entries you make in the App to track your health and performance. This data is yours; we store and sync it to provide the service to you.

Dose logs (compound name, dosage, frequency, timing)
Stack configurations (combinations of compounds)
Custom compounds you add to your library
Injection site logs (body location)
Symptom entries
Bloodwork data (lab values you enter)
Weight tracking entries
Lift session data (exercises, sets, reps, weight)
Custom exercises you add
Nutrition logs and custom foods
Demographic information (age, sex, height, weight) entered during onboarding
Social posts and comments (only if you use social features)
Direct messages between users (only if you use messaging features)
Friends list (only if you use social features)
AI Coach conversations (your messages and the AI’s responses)
Photos you upload (such as avatars, progress photos, or food photos), once that feature becomes available -Bloodwork photos you choose to scan (optional) — if you use the photo-analysis feature, the image is sent for analysis as described in Section 5.2; the extracted lab values are then stored like any other bloodwork entry.

2.3 Technical Data

To ensure the App functions properly and to debug issues, we collect:

App version
Device operating system and version
General device type (iPhone, Android phone, etc.)
Crash logs, if you experience an app crash. We use Sentry to collect crash and error reports so we can diagnose and fix problems. Sentry does not receive your IP address.

We do not collect IP addresses for tracking purposes. We do not collect advertising identifiers.

3. What We Do NOT Collect

Our commitment to privacy means we have actively chosen not to collect the following:

Location data — We do not request or collect your precise or approximate location.
Contacts — We do not access your phone’s contact list.
Microphone — We do not access your microphone.
Camera and photo library — We do not access these except at the specific moment you choose to upload a photo (e.g., setting an avatar).
Advertising identifiers — We do not use Apple’s IDFA, Google’s Advertising ID, or any other identifier for advertising purposes. We do not present Apple’s App Tracking Transparency prompt because we do not track you.
Cross-app or cross-site tracking — We do not monitor your activity in other apps or on websites.
Other health app data — We do not pull data from Apple Health, Google Fit, Garmin, Fitbit, or any other health platform on your device.
Email contents or messaging metadata — We do not access any of your personal communications outside the App.
Biometric data — We do not collect fingerprints, face data, or other biometric information. (Note: If you choose to unlock the App with Face ID or Touch ID in a future update, that authentication is handled entirely by your device’s operating system, and we never receive your biometric data.)

4. How We Use Your Data

We use the data described above only for the following purposes:

To provide the App’s core functionality (logging, tracking, syncing across your devices)
To authenticate you and maintain your account
To process subscriptions and provide access to DOSR Pro features
To allow you to use social features (posts, comments, DMs, friends)
To generate responses from the AI Coach when you choose to send messages to it
To improve the App’s stability through crash logs
To respond to your support inquiries

We do not use your data for advertising. We do not profile you for marketing purposes.

5. Third Parties That Process Your Data

We work with a small number of trusted service providers to deliver the App. Each is contractually obligated to protect your data.

5.1 Supabase

Supabase is our cloud database provider. Data you create in the App is synced to Supabase so it persists across your devices and is backed up. Supabase stores data in encrypted form at rest and in transit. Their privacy policy is available at https://supabase.com/privacy.

###5.2 Anthropic (AI Features)

AI Coach: The App offers an optional AI Coach feature that answers your questions and provides personalized guidance based on the data you track. If — and only if — you choose to use this feature, your message to the Coach, your recent Coach conversation history, and the relevant data you have logged — including your protocols and dose logs, body weight, training and nutrition logs, streak, and basic demographic information (age, sex, weight) — are sent, by way of our own secure server, to Anthropic’s API to generate the Coach’s reply. This information is sent only to produce Coach responses and for no other purpose. You will be asked to explicitly consent before the first time you use the AI Coach; if you do not consent, none of your data is sent and you can continue using the rest of the App normally.

Bloodwork Photo Analysis: The App offers an optional feature that lets you photograph a lab/bloodwork report and have it analyzed by AI to extract your lab values. If — and only if — you choose to use this feature, the photo image you capture is sent, by way of our own secure server, to Anthropic’s API for analysis. No other personal data accompanies the image — we do not send your name, demographic information, health history, or other logged data with it. You will be asked to explicitly consent before the first time you use this feature; if you do not consent, no image is sent and you can enter your bloodwork values manually instead.

Under Anthropic’s commercial API terms, the data sent to Anthropic (your AI Coach messages and context, and/or your bloodwork image, depending on which features you use):

is not used to train Anthropic’s models; may be retained by Anthropic for a limited period (generally up to 30 days) to detect and prevent abuse, after which it is deleted, except where retention is required to comply with law. Anthropic’s privacy policy is available at https://www.anthropic.com/legal/privacy.

5.3 RevenueCat

RevenueCat manages subscription state for paid users. RevenueCat receives your user identifier and subscription purchase information from Apple or Google. RevenueCat does not have access to the personal data you log in the App. Their privacy policy is available at https://www.revenuecat.com/privacy.

5.4 Apple and Google

When you purchase a subscription, your payment is processed by Apple (on iOS) or Google (on Android). We never see or store your credit card information. Your purchase data is subject to Apple’s or Google’s privacy policies.

5.5 Expo

The App is built using the Expo platform. Expo provides over-the-air updates and crash reporting infrastructure. Their privacy policy is available at https://expo.dev/privacy.

5.6 Sentry

Sentry provides crash and error reporting. When the App encounters an error or crash, diagnostic information such as device type, operating system version, and a technical error report is sent to Sentry so we can identify and fix problems. Sentry does not receive your IP address. Their privacy policy is available at https://sentry.io/privacy/.

6. Where Your Data Is Stored

Your data is stored locally on your device (in encrypted device storage) and synced to Supabase’s cloud database. Supabase’s servers are located in the United States.

If you are accessing the App from outside the United States, please be aware that your data will be transferred to and stored in the United States, which may have different data protection laws than your country.

7. Data Retention

We retain your data as long as your account is active. If you delete your account:

Your data will be deleted from our active systems immediately.
Your data may persist in encrypted backups for up to 30 days before being permanently purged. -If you use the optional bloodwork photo analysis feature, the image sent to Anthropic is handled as described in Section 5.2 — not used to train their models, and retained only briefly for abuse prevention before deletion. Your AI Coach conversation history is stored on your device and is deleted along with your account. The messages and context sent to Anthropic to generate Coach replies are handled as described in Section 5.2 — not used to train their models, and retained only briefly for abuse prevention before deletion.

You can request immediate deletion of all data, including backup copies, by contacting us at the email above.

8. Your Rights

You have the following rights regarding your data:

Access — You can view all data you have logged in the App at any time directly within the App.
Export — Paid users can export their protocol data as CSV and their log data as JSON directly from the App. Free users can request a manual data export by contacting us; we will provide it within 30 days at no cost.
Correction — You can edit or delete any logged data directly within the App.
Deletion — You can delete your account from within the App, which triggers the data deletion process described in Section 7.
Withdraw consent — You can stop using the App at any time. If you do not want certain features (such as the AI Coach), simply do not use them.

8.1 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what categories of personal information we collect, the right to delete personal information, and the right not to be discriminated against for exercising your rights. We do not sell personal information. To exercise your CCPA rights, contact us at the email above.

If you are in the European Economic Area, you have rights under the General Data Protection Regulation, including the right to access, rectify, erase, restrict processing of, and port your personal data. You also have the right to lodge a complaint with a supervisory authority. To exercise your GDPR rights, contact us at the email above. The legal basis for our processing is your consent and our contractual obligation to provide the App.

9. Data Security

We use industry-standard security measures to protect your data, including:

TLS encryption for all data in transit.
Encryption at rest in our Supabase database.
Row-level security policies that restrict each user’s access to their own data only.
Cryptographic hashing of passwords.
Regular security reviews and updates.

Despite these measures, no system is perfectly secure. If we become aware of a data breach that affects your information, we will notify you within 72 hours of discovery in accordance with applicable law.

10. Children’s Privacy

The App is intended for users 18 years of age or older. We do not knowingly collect personal information from individuals under 18. If we learn that we have collected data from someone under 18, we will delete it. If you believe a minor is using the App, please contact us.

11. Sale of Data

We do not sell your personal data. We do not share your data with any party for monetary or other valuable consideration. We share data only with the service providers listed in Section 5, and only as necessary to operate the App.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. When we make material changes, we will notify you within the App and update the “Last Updated” date at the top of this policy. Continued use of the App after changes constitutes acceptance of the updated policy.

13. Medical and Health Information

Because the App involves tracking health-related data (compounds, doses, bloodwork, symptoms), please also review our Medical Disclaimer. The Medical Disclaimer explains the informational nature of the App and the responsibilities of users.

14. Contact

For any questions about this policy or your data, contact us at dosr.llc@gmail.com.

DOSR-AI is published by DOSR AI LLC. Governed by the laws of the State of North Carolina, United States.