DoseWise — Privacy Policy
DoseWise is an iPhone and Apple Watch app for recording medications, schedules, dose history, programs, and package supply. Most of that information stays on your devices. This policy explains the limited cases in which data leaves them: subscription management, an optional cloud label scan, and anonymous usage statistics that never include your medication information.
Your medication data stays on your devices
The medications and ingredients you add, your schedules and programs, dose records, notes, package supply, notification settings, and app preferences are stored in the app’s private database on your iPhone. DoseWise has no user account and does not sync this database to a DoseWise server.
If you use the Apple Watch companion, the information needed for its Today and History views passes between your paired Apple devices through Apple’s system frameworks. We do not receive it.
Label photos and scanning
You can scan a medication label with one to four photos. Text recognition and the standard scan path run on your device. DoseWise does not upload those photos or the recognized text during local scanning.
Before the first cloud scan, the app asks whether you want to use cloud scanning, remembers your answer, and lets you change it in Settings. If you agree, DoseWise sends only the selected, compressed label photos and proof of an active App Store subscription over HTTPS to the DoseWise scan service. The service runs on Cloudflare and forwards the photos to Google’s paid Gemini API to create an editable medication draft. Recognized OCR text from your device is not included. You can decline and use local scanning instead.
Each iPhone may also use one free cloud scan before subscribing. For that scan, instead of a subscription proof, the app sends a one-time token from Apple’s DeviceCheck service. The DoseWise scan service exchanges it with Apple to read and then set a flag that Apple keeps for DoseWise on that device, so the free scan is used only once, even after the app is reinstalled. DeviceCheck does not tell DoseWise who you are or give it a device identifier. Apple’s handling is covered by Apple’s Privacy Policy.
The DoseWise service does not store the photos, the extracted medication fields, the signed transaction proof, or the DeviceCheck token. It stores operational records used to enforce allowances and prevent duplicate requests: a pseudonymous subscription identifier (for the free scan, a keyed hash of the DeviceCheck token), a random request identifier, keyed request digest, quota period, status, timestamps, and model token counts. These compact records currently have no automatic expiry. Request and model contents are excluded from DoseWise logs and analytics.
Cloudflare and Google process the request to provide this feature. Google states that data sent through its paid Gemini services is not used to improve its products, although limited retention can apply for abuse monitoring. Their handling is covered by the Cloudflare Privacy Policy and Gemini API data retention documentation.
Subscriptions
Subscriptions are purchased through Apple’s App Store. Apple handles your payment details; DoseWise never receives them. Apple’s handling is covered by Apple’s Privacy Policy.
DoseWise uses RevenueCat to show subscription offers, verify access, and restore purchases. RevenueCat receives an automatically generated anonymous app user ID, purchase and entitlement information, technical request information, and paywall activity such as an impression. DoseWise does not give RevenueCat your name, email address, medication data, advertising identifier, or a DoseWise account ID. Automatic device identifier collection is disabled. Once per install, RevenueCat also receives an attribution token from Apple’s AdServices framework. It exchanges the token with Apple to learn whether you installed DoseWise from an Apple Ads campaign and, if so, which campaign, ad group and keyword, and keeps that with the anonymous subscription record. DoseWise uses this only to measure its own Apple Ads; it never involves the advertising identifier. RevenueCat’s handling is covered by its Privacy Policy.
Notifications, camera, and photos
Medication reminders are scheduled locally through Apple’s notification system. DoseWise does not operate a push-notification server and does not receive notification content. Camera and photo access is used only when you choose to capture or select label images. You can change system permissions in iOS Settings.
Export, import, and backups
When you export a backup or database file, DoseWise creates it on your device and hands it to Apple’s share sheet. When you import a backup, the file you choose is read on your device. You decide where exported files go and who can access them; DoseWise does not upload them.
Apple may include app data in an iPhone or Apple Watch backup according to your device and iCloud settings. Those backups are controlled by you and Apple.
Anonymous usage statistics
To understand whether people get through setup and whether the subscription offer works, DoseWise sends a small set of anonymous events to PostHog, an analytics service, with data hosted in the European Union. Only these are sent:
- Setup steps: the introduction started, which of its screens were reached, its practice dose was tried, how its optional first-medication step ended (scanned, typed, or skipped), that it was completed or skipped, and, once, that setup after first subscribing finished.
- That a medication was added and where (during setup, after subscribing, or later in the app), and, once only, that the first dose was logged — never which medication, its ingredients, strength, schedule, or dose.
- Your cloud scanning choice (allowed or declined, and whether it was made in the scanner or in Settings), and whether the free scan before subscribing was used, unavailable, or declined — never the photos or label text.
- Whether you allowed notifications or alarms, which reminder style you chose (standard, time-sensitive, or alarm), that a test reminder was sent, and, as a fixed reason, when reminders could not all be scheduled.
- The subscription screen being shown or failing to load, a plan being chosen, a purchase being started, completed, cancelled, pending, or failing (with the App Store product chosen), a free trial starting, a restore and its result, and the review prompt being requested.
- When the app is opened, closed, installed, or updated.
- A random install identifier, generated on your device and hashed (SHA-256) before it is sent. It is not your name, email, device identifier, or advertising ID.
- Basic technical details the analytics library adds automatically: app version, device model (such as “iPhone”), iOS version, screen size, language and region setting, time zone, and whether you are on Wi-Fi or cellular.
Your medications, ingredients, schedules, programs, dose records, supply, notes, label photos, and scan results are never part of these statistics. Apart from the single “first dose logged” event, neither is whether or when you take a dose. PostHog uses your IP address to estimate an approximate location — country, region, city, postal code and approximate coordinates — stores that location with the events, and then discards the IP address itself. It never records screens, taps, or recordings of your use of the app. The Apple Watch app sends nothing.
Advertising and tracking
DoseWise has no advertising and no third-party crash-reporting service. It does not track you across apps or websites and does not request App Tracking Transparency permission. Measuring its own Apple Ads campaigns uses Apple’s standard attribution, described under Subscriptions, which does not need that permission. The subscription, cloud-scan, and usage records described above are used only to provide, operate, and improve DoseWise. We do not sell your data.
Your choices and deletion
- Cloud label scanning is used only if you allow it; you can change that choice in Settings, and declining keeps scans on your device.
- Camera, photo, and notification permissions can be changed in iOS Settings.
- You can export your DoseWise data before deleting it.
- Deleting DoseWise removes its local database from that device, subject to backups you control through Apple.
Apple and RevenueCat keep subscription records under their own retention policies. To ask about privacy rights or the pseudonymous cloud-scan records controlled by DoseWise, contact us at the address below. We may need information connected to your purchase to locate an otherwise anonymous record.
Children
DoseWise is not directed at children under 13 and does not knowingly collect personal information from them.
Changes to this policy
If DoseWise’s data practices change, this page and the App Store privacy disclosures will be updated before the changed version is released. The effective date above identifies the current version.
Contact
Questions, concerns, or privacy requests: support@dominikdrag.com.