Privacy & Data Protection

Last updated: February 2026

DoseRight is committed to protecting your privacy and personal health data. This policy explains what data we collect, how we use it, and your rights under GDPR and other privacy regulations. Your health data belongs to you.

Data We Collect

  • Account information (name, email) when you sign in with Google
  • Health data you voluntarily enter (symptoms, medication records, health readings)
  • Device information for push notifications (subscription tokens)
  • Usage data to improve our services (anonymous analytics)

How We Protect Your Data

  • All data is transmitted over encrypted HTTPS connections
  • Health data is stored securely in our database with access controls
  • We never sell or share your personal health data with third parties
  • Authentication is handled through industry-standard OAuth2 and JWT tokens
  • Session data is encrypted and expires automatically

How We Use Your Data

  • To provide personalized health tracking and medication reminders
  • To power AI-assisted health tools (symptoms, dosage calculations)
  • AI queries are processed in real-time and not stored beyond your session
  • To send you medication reminders via push notifications (opt-in only)
  • We do not use your data for advertising purposes

GDPR Compliance (European Users)

  • Right to Access: You can view all your stored data at any time through the app
  • Right to Rectification: You can edit or correct your health records
  • Right to Erasure: You can delete your data including medical records, health readings, and account information
  • Right to Data Portability: You can export your health reports
  • Right to Withdraw Consent: You can unsubscribe from notifications and delete your account at any time
  • Data Processing Basis: We process data based on your explicit consent when you create an account and enter health information

Data Retention & Deletion

  • Health readings and records are retained as long as your account is active
  • You can delete individual records at any time from within the app
  • Chat session history can be cleared by you at any time
  • If you delete your account, all associated data is permanently removed
  • Anonymous, aggregated data may be retained for service improvement

Third-Party Services

  • Google OAuth: Used for authentication only. We receive your name, email, and profile picture
  • OpenAI API: Health queries are processed through AI. No personal identifiers are sent with queries
  • Push Notifications: We use standard Web Push protocol. Subscription data is stored securely
  • No advertising networks or tracking pixels are used in this application

Your Rights

  • You can access, export, or delete your health data at any time
  • You can opt out of push notifications in the Settings page
  • You can use the app without creating an account (limited features)
  • You have the right to lodge a complaint with your local data protection authority
  • For data protection inquiries, contact us at the email below

Questions about your data?

Contact our Data Protection Officer at mgpp.tech@gmail.com

DoseRight — We aim to respond within 48 hours