Privacy Policy

1. Who We Are

Dosavy is an educational and informational tool, not a medical device or telehealth service. The Service is operated from Switzerland, and the operator is the controller of the personal data described here. You can reach us about anything in this Policy at support@dosavy.com.

2. What We Collect

• Account data: your email address, your password (stored only as a hash), authentication metadata, your timezone, and the record of which version of these policies you accepted and when.
• Health-adjacent data you choose to enter: protocols, compounds, dose logs, reminders, and any notes or side-effect tags you record. This is sensitive personal data under GDPR and the Swiss nDSG, and we treat it accordingly.
• AI advisor interactions: the text of your questions and the advisor's answers, the sources cited, the model used, and token counts. Every turn is logged — a deliberate safety and accountability measure, and Section 6 explains what happens to that log when you delete your account.
• Subscription data: your plan and status, and the customer and subscription identifiers our payment provider gives us. Your card details never reach us — they go directly to Stripe, which stores them and keeps its own billing records.
• Usage and device data: pages visited, timestamps, browser and device type, and an IP address (used by our providers for approximate location and abuse prevention). Collected through our analytics provider.
• Error diagnostics: when something breaks, a report containing the error, a stack trace, the page you were on and your browser details. These reports can incidentally include data from the page you were viewing.
• Push notification subscriptions: if you enable reminders, the endpoint your browser or device issues so a notification can be delivered to it.

We do not buy personal data about you from anyone, and we do not sell yours.

3. Why We Process It

To operate your account, run the reconstitution/dosing calculators you request, store protocols and dose logs you create, power the AI advisor feature, send reminders you configure, take payment for and manage your subscription, understand how the product is used so we can improve it, diagnose faults, and maintain the security and integrity of the Service.

4. Legal Basis and Consent

• Your explicit consent for health-adjacent data. It is given at signup, and again before your first use of the AI advisor, and each is recorded as a consent event tied to your account, the version of the document you accepted, and the time of acceptance. You can withdraw consent at any time by deleting your account, subject to the retention described in Section 6.
• Performance of our contract with you for your account, your subscription, and the features you use.
• Our legitimate interests in keeping the Service secure and working, in understanding how it is used, and in being able to establish or defend legal claims (Section 6).
• Legal obligation for invoices and accounting records, which tax law requires us and our payment provider to keep for a fixed period regardless of anything else in this Policy.

5. Cookies and Similar Technologies

• Strictly necessary: the cookies that keep you signed in, and a stored preference for light or dark appearance. Without these the Service does not work, and they are not used to track you.
• Analytics: our analytics provider stores an identifier in your browser so repeat visits can be counted as one person rather than many. If your browser sends a "Do Not Track" signal we collect no analytics at all, and you can block or clear these through your browser.

We use no advertising or cross-site tracking cookies, and run no ad networks.

6. Retention, and What Survives Deletion

We retain data for as long as your account is active, and we aim to collect only what the product needs to function. You can delete your account yourself at any time from Settings. Doing so deletes your profile, protocols, dose logs, reminder settings, push subscriptions, consent records and conversation list immediately and irreversibly, and cancels any active subscription.

Two things survive, and we would rather state both plainly.

First, the AI advisor log. The record of your questions and the answers given, including the sources cited, is retained after account deletion. We keep it because an AI answer about dosing must remain reconstructable if it is ever questioned, which is a legitimate interest in establishing and defending legal claims (GDPR Art. 17(3)(e)). We keep it for five years from the date of the exchange. What that record contains afterwards: the full text of your questions and our answers, together with the sources cited. Your account identifier is removed and replaced with a one-way reference. Your email, name, protocols, dose history and payment details are not part of it.

Second, a deletion receipt. We keep a record that an account was deleted, when, and how many advisor log rows were retained rather than erased. It carries the same one-way reference and no other identifier — no account id, no email, no payment reference. It exists so we can show that an erasure request was actually honoured, which is itself a legal obligation (GDPR Art. 5(2)).

We describe these records as pseudonymous, not anonymous, and the difference matters. The one-way reference is derived using a secret we hold, and our payment provider separately holds a record linking your account identifier to your billing details under its own retention obligations. So we are not able to claim these records identify nobody: with the information available to us, we can still trace them back to an account. They therefore remain personal data, and your rights under Section 8 continue to apply to them. If you ask us what we still hold about you after deleting your account, we can find it and tell you. What we will not do is delete it before the five years are up, because defending a claim about an answer we gave is the entire reason it exists — that is the balance Art. 17(3)(e) permits us to strike, and we would rather describe it accurately than overstate how unidentifiable it is.

Please avoid typing your name, address, or other identifying details into the AI advisor. Nothing requires you to, the advisor never asks, and it is the simplest way to keep this record limited to the substance of the exchange — replacing the account identifier does not remove a name you typed into the question itself.

Separately, Stripe retains billing and invoice records under its own obligations, and tax law requires invoice data to be kept for a fixed period. Deleting your Dosavy account does not and cannot erase those.

7. Who Else Processes Your Data

We use the following providers to run the Service. Where required, we maintain data processing agreements with them. We do not sell your data, and none of these providers is permitted to use it for their own purposes.

• Supabase — hosts the database and handles sign-in — it holds your account and everything you enter. Processes data in: European Union (Frankfurt).
• Vercel — hosts and serves the application. Processes data in: United States, with delivery from servers worldwide.
• Stripe — processes subscription payments and stores your card details — we never receive them. Processes data in: United States and Ireland.
• DeepSeek — runs the AI advisor's language model on the text of your questions. Processes data in: China.
• PostHog — product analytics — which pages are used, and how often. Processes data in: United States.
• Sentry — error monitoring — diagnostics when something breaks. Processes data in: United States.

The AI advisor deserves a specific note. When you ask the advisor a question, the text you typed is sent to DeepSeek (China) to generate the answer. That text is whatever you chose to write, which on this product can be health-related. We do not send your protocols, dose history, email or name along with it. If you would rather a third-party model provider not see a question, do not ask the advisor that question — the rest of the product works without it.

8. Your Rights

Subject to applicable law (GDPR, Swiss nDSG), you have the right to access, correct, export, and delete your personal data, to object to or ask us to restrict certain processing, and to withdraw consent at any time. You can delete your account yourself at any time from Settings — it takes effect immediately, cancels any active subscription, and cannot be undone. The retention described in Section 6 is the only thing that survives it, and your rights of access and correction continue to apply to what survives. For access, correction or export requests, email support@dosavy.com.

If you think we have handled your data wrongly, you can complain to a supervisory authority — in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), and in the EU/EEA the authority where you live or work.

9. International Transfers

As Section 7 shows, several of our providers are outside Switzerland and the EU/EEA — including the model provider that receives the text of your advisor questions. Where the destination country is not covered by an adequacy decision, we rely on Standard Contractual Clauses or equivalent safeguards. If where your data goes matters to you, read Section 7 before using the advisor rather than after.

10. Security

Data is encrypted in transit. Access to your rows in our database is enforced by the database itself, per user, rather than by application code alone — so one account cannot read another's protocols or logs. No system is perfectly secure; if a breach affects your personal data and the law requires it, we will notify you and the relevant authority.

11. Children

The Service is for adults aged 18 or over. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

12. Automated Decision-Making

We do not make decisions about you by automated means that produce legal or similarly significant effects. The AI advisor generates information for you to read and verify; it decides nothing about you, and nothing it says is a medical decision — see the Terms of Service.

13. Changes to This Policy

We may update this Policy from time to time. Each version carries the version number and date shown at the top of this page, and the version you accepted is recorded against your account. Material changes — including adding a provider that receives your data — will be flagged at sign-in where feasible.

14. Contact

Questions about this Policy, or requests to exercise your data rights, can be sent to support@dosavy.com. We aim to respond within 30 days, as GDPR and the nDSG require.