Dosr-ai-legal

DOSR-AI Privacy Policy

Effective Date: May 27, 2026 Last Updated: June 7, 2026

1. Introduction

This Privacy Policy describes how DOSR-AI (“we,” “us,” or “our”) collects, uses, stores, and protects your information when you use the DOSR-AI mobile application (the “App”) on iOS and Android.

DOSR-AI is published by DOSR AI LLC (“the Publisher”). By using the App, you agree to the practices described in this policy.

We are committed to data minimization: we collect only what is necessary to provide the App’s functionality and explicitly avoid collecting data that is not required.

If you have any privacy-related questions, contact us at dosr.llc@gmail.com.

2. What We Collect

We organize our data collection into three categories: account data, data you create, and technical data.

2.1 Account Data

To create and maintain your account, we collect:

Email address — used for authentication, password reset, and essential account communications.
Password — stored as a one-way cryptographic hash. We never store or have access to your actual password.
User identifier — a unique ID generated by our backend (Supabase) when you sign up.
Subscription status — whether you have a free or paid (DOSR Pro) subscription, managed via RevenueCat.

2.2 Data You Create

These are the entries you make in the App to track your health and performance. This data is yours; we store and sync it to provide the service to you.

Dose logs (compound name, dosage, frequency, timing)
Stack configurations (combinations of compounds)
Custom compounds you add to your library
Injection site logs (body location)
Symptom entries
Bloodwork data (lab values you enter)
Weight tracking entries
Lift session data (exercises, sets, reps, weight)
Custom exercises you add
Nutrition logs and custom foods
Demographic information (age, sex, height, weight) entered during onboarding
Social posts and comments (only if you use social features)
Direct messages between users (only if you use messaging features)
Friends list (only if you use social features)
AI Coach conversations (your messages and the AI’s responses)
Photos you upload (such as avatars, progress photos, or food photos), once that feature becomes available

2.3 Technical Data

To ensure the App functions properly and to debug issues, we collect:

App version
Device operating system and version
General device type (iPhone, Android phone, etc.)
Crash logs, if you experience an app crash (this feature may be added post-launch with a service like Sentry; you will be notified via an updated policy when it is enabled)

We do not collect IP addresses for tracking purposes. We do not collect advertising identifiers.

3. What We Do NOT Collect

Our commitment to privacy means we have actively chosen not to collect the following:

Location data — We do not request or collect your precise or approximate location.
Contacts — We do not access your phone’s contact list.
Microphone — We do not access your microphone.
Camera and photo library — We do not access these except at the specific moment you choose to upload a photo (e.g., setting an avatar).
Advertising identifiers — We do not use Apple’s IDFA, Google’s Advertising ID, or any other identifier for advertising purposes. We do not present Apple’s App Tracking Transparency prompt because we do not track you.
Cross-app or cross-site tracking — We do not monitor your activity in other apps or on websites.
Other health app data — We do not pull data from Apple Health, Google Fit, Garmin, Fitbit, or any other health platform on your device.
Email contents or messaging metadata — We do not access any of your personal communications outside the App.
Biometric data — We do not collect fingerprints, face data, or other biometric information. (Note: If you choose to unlock the App with Face ID or Touch ID in a future update, that authentication is handled entirely by your device’s operating system, and we never receive your biometric data.)

4. How We Use Your Data

We use the data described above only for the following purposes:

To provide the App’s core functionality (logging, tracking, syncing across your devices)
To authenticate you and maintain your account
To process subscriptions and provide access to DOSR Pro features
To allow you to use social features (posts, comments, DMs, friends)
To generate responses from the AI Coach when you choose to send messages to it
To improve the App’s stability through crash logs (when enabled)
To respond to your support inquiries

We do not use your data for advertising. We do not profile you for marketing purposes.

5. Third Parties That Process Your Data

We work with a small number of trusted service providers to deliver the App. Each is contractually obligated to protect your data.

5.1 Supabase

Supabase is our cloud database provider. Data you create in the App is synced to Supabase so it persists across your devices and is backed up. Supabase stores data in encrypted form at rest and in transit. Their privacy policy is available at https://supabase.com/privacy.

5.2 Anthropic (AI Coach)

When you send a message to the AI Coach feature, that message is transmitted to Anthropic’s API to generate a response. Under Anthropic’s commercial API terms:

Your AI Coach messages are not used to train Anthropic’s models.
Your messages may be retained by Anthropic for a limited period (generally up to 30 days) to detect and prevent abuse, after which they are deleted, except where retention is required to comply with law.

The AI Coach has access to your dose logs, symptoms, bloodwork, and other relevant data to provide personalized responses. By using the AI Coach, you consent to this data being sent to Anthropic under these conditions. If you do not want your data sent to Anthropic, do not use the AI Coach feature. Anthropic’s privacy policy is available at https://www.anthropic.com/legal/privacy.

5.3 RevenueCat

RevenueCat manages subscription state for paid users. RevenueCat receives your user identifier and subscription purchase information from Apple or Google. RevenueCat does not have access to the personal data you log in the App. Their privacy policy is available at https://www.revenuecat.com/privacy.

5.4 Apple and Google

When you purchase a subscription, your payment is processed by Apple (on iOS) or Google (on Android). We never see or store your credit card information. Your purchase data is subject to Apple’s or Google’s privacy policies.

5.5 Expo

The App is built using the Expo platform. Expo provides over-the-air updates and crash reporting infrastructure. Their privacy policy is available at https://expo.dev/privacy.

6. Where Your Data Is Stored

Your data is stored locally on your device (in encrypted device storage) and synced to Supabase’s cloud database. Supabase’s servers are located in the United States.

If you are accessing the App from outside the United States, please be aware that your data will be transferred to and stored in the United States, which may have different data protection laws than your country.

7. Data Retention

We retain your data as long as your account is active. If you delete your account:

Your data will be deleted from our active systems immediately.
Your data may persist in encrypted backups for up to 30 days before being permanently purged.
Your messages sent to the AI Coach are handled by Anthropic as described in Section 5.2 — not used to train their models, and retained only briefly for abuse prevention before deletion.

You can request immediate deletion of all data, including backup copies, by contacting us at the email above.

8. Your Rights

You have the following rights regarding your data:

Access — You can view all data you have logged in the App at any time directly within the App.
Export — Paid users can export their data in CSV, JSON, or PDF format directly from the App. Free users can request a manual data export by contacting us; we will provide it within 30 days at no cost.
Correction — You can edit or delete any logged data directly within the App.
Deletion — You can delete your account from within the App, which triggers the data deletion process described in Section 7.
Withdraw consent — You can stop using the App at any time. If you do not want certain features (such as the AI Coach), simply do not use them.

8.1 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what categories of personal information we collect, the right to delete personal information, and the right not to be discriminated against for exercising your rights. We do not sell personal information. To exercise your CCPA rights, contact us at the email above.

If you are in the European Economic Area, you have rights under the General Data Protection Regulation, including the right to access, rectify, erase, restrict processing of, and port your personal data. You also have the right to lodge a complaint with a supervisory authority. To exercise your GDPR rights, contact us at the email above. The legal basis for our processing is your consent and our contractual obligation to provide the App.

9. Data Security

We use industry-standard security measures to protect your data, including:

TLS encryption for all data in transit.
Encryption at rest in our Supabase database.
Row-level security policies that restrict each user’s access to their own data only.
Cryptographic hashing of passwords.
Regular security reviews and updates.

Despite these measures, no system is perfectly secure. If we become aware of a data breach that affects your information, we will notify you within 72 hours of discovery in accordance with applicable law.

10. Children’s Privacy

The App is intended for users 18 years of age or older. We do not knowingly collect personal information from individuals under 18. If we learn that we have collected data from someone under 18, we will delete it. If you believe a minor is using the App, please contact us.

11. Sale of Data

We do not sell your personal data. We do not share your data with any party for monetary or other valuable consideration. We share data only with the service providers listed in Section 5, and only as necessary to operate the App.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. When we make material changes, we will notify you within the App and update the “Last Updated” date at the top of this policy. Continued use of the App after changes constitutes acceptance of the updated policy.

13. Medical and Health Information

Because the App involves tracking health-related data (compounds, doses, bloodwork, symptoms), please also review our Medical Disclaimer. The Medical Disclaimer explains the informational nature of the App and the responsibilities of users.

14. Contact

For any questions about this policy or your data, contact us at dosr.llc@gmail.com.

DOSR-AI is published by DOSR AI LLC. Governed by the laws of the State of North Carolina, United States.