Skip to content
Dosavy

Privacy Policy

Version 1.4, last updated 2026-09-20.

1. Who We Are

Dosavy is an educational and informational tool, not a medical device or telehealth service. The Service is operated from Switzerland by Dosavy, Route du Musée 2, Fribourg, Switzerland, which is the controller of the personal data described in this Policy. You can reach us about anything in it at support@dosavy.com.

2. What We Collect

  • Account data: your email address, your password (stored only as a hash), authentication metadata, your timezone, and the record of which version of these policies you accepted and when.
  • Health-adjacent data you choose to enter: protocols, compounds, dose logs, reminders, body measurements (weight, waist, body fat), bloodwork results you type in together with any lab report file you attach, and any notes or side-effect tags you record. This is sensitive personal data under GDPR and the Swiss nDSG, and we treat it accordingly.
  • AI advisor interactions: the text of your questions and the advisor's answers, the sources cited, the model used, and token counts. Every turn is logged: a deliberate safety and accountability measure, and Section 6 explains what happens to that log when you delete your account.
  • Subscription data: your plan and status, and the customer and subscription identifiers our payment provider gives us. Your card details never reach us: they go directly to Stripe, which stores them and keeps its own billing records.
  • Usage and device data: pages visited, timestamps, browser and device type, and an IP address (used by our providers for approximate location and abuse prevention). We also record that you took certain actions (created a protocol, added a compound to it, logged a dose, asked the advisor a question, started or ended a subscription) but never what the action was about: no compound names, no doses, no protocol names, and none of the text you write or ask is sent to our analytics provider. Collected through our analytics provider.
  • Error diagnostics: when something breaks, a report containing the error, a stack trace, the page you were on and your browser details. These reports can incidentally include data from the page you were viewing.
  • Push notification subscriptions: if you enable reminders, the endpoint your browser or device issues so a notification can be delivered to it.
  • Reminder emails: if you enable reminders, our email provider receives your email address and the reminder itself. Reminders are discreet by default: the message says a dose is due and at what time, and names no compound. If you switch discreet mode off in Settings, the compound's name is included and therefore also passes through that provider. Nothing else about your protocols, doses, notes or history is ever put in an email.

We do not buy personal data about you from anyone, and we do not sell yours.

3. Why We Process It

To operate your account, run the reconstitution/dosing calculators you request, store protocols and dose logs you create, power the AI advisor feature, send reminders you configure, take payment for and manage your subscription, understand how the product is used so we can improve it, diagnose faults, and maintain the security and integrity of the Service.

4. Legal Basis and Consent

  • Your explicit consent for health-adjacent data. It is given at signup, and again before your first use of the AI advisor, and each is recorded as a consent event tied to your account, the version of the document you accepted, and the time of acceptance. The same consent is what we rely on for the transfer of your advisor questions described in Section 9. You can withdraw consent at any time by deleting your account, subject to the retention described in Section 6.
  • Performance of our contract with you for your account, your subscription, and the features you use.
  • Our legitimate interests in keeping the Service secure and working, in understanding how it is used, and in being able to establish or defend legal claims (Section 6).
  • Legal obligation for invoices and accounting records, which tax law requires us and our payment provider to keep for a fixed period regardless of anything else in this Policy.

5. Cookies and Similar Technologies

  • Strictly necessary: the cookies that keep you signed in, and a stored preference for light or dark appearance. Without these the Service does not work, and they are not used to track you.
  • Analytics, only if you agree: our analytics provider stores an identifier in your browser so repeat visits can be counted as one person rather than many. Nothing is stored and no analytics software runs until you accept it in the banner shown on your first visit. Declining is a single click, and if you accept you can withdraw at any time from Settings, which stops collection immediately and clears the identifier. We also honour your browser's "Do Not Track" signal in addition to your choice.

Separately from that identifier, our servers record a small, fixed list of product events (an account created, a protocol created, a dose logged, a question asked of the AI advisor) against a pseudonymous account identifier. These carry no compound name, no dose, no protocol name and no text you write or ask, they set nothing on your device, and we rely on our legitimate interest in knowing whether the product works. If you decline analytics, we stop recording these too.

We use no advertising or cross-site tracking cookies, and run no ad networks.

6. Retention, and What Survives Deletion

We retain data for as long as your account is active, and we aim to collect only what the product needs to function. You can delete your account yourself at any time from Settings. Doing so deletes your profile, protocols, dose logs, reminder settings, push subscriptions, consent records and conversation list immediately and irreversibly, and cancels any active subscription.

Two things survive, and we would rather state both plainly.

First, the AI advisor log. The record of your questions and the answers given, including the sources cited, is retained after account deletion. We keep it because an AI answer about dosing must remain reconstructable if it is ever questioned, which is a legitimate interest in establishing and defending legal claims (GDPR Art. 17(3)(e)). We keep it for 5 years from the date of the exchange, and not longer. What that record contains afterwards: the full text of your questions and our answers, together with the sources cited. Your account identifier is removed and replaced with a one-way reference. Your email, name, protocols, dose history and payment details are not part of it.

Second, a deletion receipt. We keep a record that an account was deleted, when, and how many advisor log rows were retained rather than erased. It carries the same one-way reference and no other identifier: no account id, no email, no payment reference. It exists so we can show that an erasure request was actually honoured, which is itself a legal obligation (GDPR Art. 5(2)).

We describe these records as pseudonymous, not anonymous, and the difference matters. The one-way reference is derived using a secret we hold, and our payment provider separately holds a record linking your account identifier to your billing details under its own retention obligations. So we are not able to claim these records identify nobody: with the information available to us, we can still trace them back to an account. They therefore remain personal data, and your rights under Section 8 continue to apply to them. If you ask us what we still hold about you after deleting your account, we can find it and tell you. What we will not do is delete it before those 5 years are up, because defending a claim about an answer we gave is the entire reason it exists. That is the balance Art. 17(3)(e) permits us to strike, and we would rather describe it accurately than overstate how unidentifiable it is.

Please avoid typing your name, address, or other identifying details into the AI advisor. Nothing requires you to, the advisor never asks, and it is the simplest way to keep this record limited to the substance of the exchange. Replacing the account identifier does not remove a name you typed into the question itself.

Separately, Stripe retains billing and invoice records under its own obligations, and tax law requires invoice data to be kept for a fixed period. Deleting your Dosavy account does not and cannot erase those.

7. Who Else Processes Your Data

We use the following providers to run the Service. We do not sell your data, and none of these providers is permitted to use it for their own purposes. Each entry says where the data physically goes and what makes sending it there lawful; Section 9 explains those bases and is where the one exception is set out.

  • Supabase: hosts the database and file storage and handles sign-in. It holds your account, everything you enter, and any lab report file you attach. Processes data in: European Union (Frankfurt). Covered by an adequacy decision, so no further safeguard is required for the transfer.
  • Vercel: hosts and serves the application. Processes data in: United States, with delivery from servers worldwide. Outside Switzerland and the EEA, under the Standard Contractual Clauses in the data processing terms this provider publishes.
  • Stripe: processes subscription payments and stores your card details. We never receive them. Processes data in: United States and Ireland. Outside Switzerland and the EEA, under the Standard Contractual Clauses in the data processing terms this provider publishes.
  • Resend: delivers the dose reminders you ask for, with the time of the dose and the compound's name only if you switch discreet mode off. Processes data in: European Union (Ireland). Covered by an adequacy decision, so no further safeguard is required for the transfer.
  • DeepSeek: runs the AI advisor's language model on the text of your questions. Processes data in: China. Outside Switzerland and the EEA, with no adequacy decision and no Standard Contractual Clauses in place. See Section 9.
  • PostHog: product analytics, which pages are opened and which features are used, as counted events; never what you track, log or ask. Processes data in: European Union (Frankfurt). Covered by an adequacy decision, so no further safeguard is required for the transfer.
  • Sentry: error monitoring, diagnostics when something breaks. Processes data in: European Union (Frankfurt). Covered by an adequacy decision, so no further safeguard is required for the transfer.

The AI advisor deserves a specific note. When you ask the advisor a question, the text you typed is sent to DeepSeek (China) to generate the answer. That text is whatever you chose to write, which on this product can be health-related. Of everything listed above, this is the transfer with the least legal protection behind it. Section 9 says exactly what does and does not cover it, and you should read it before you use the advisor.

When your question is about your own regimen, the advisor can also look up what you have saved in the app: the compounds in your active protocols, their dose, route and frequency, when your next dose is due, and how many doses you completed, missed or skipped in the last 30 days. That summary is sent to DeepSeek in the same way the question is. The app shows you each lookup on screen at the moment it happens, so you can see when it read your protocol and when it did not.

What is never sent, whatever you ask: your email, your name, the notes you write on a protocol or an individual dose, your injection sites, your dose-by-dose history, your body measurements, and your bloodwork. The advisor receives counts, not your log. If you would rather a third-party model provider not see something, do not ask the advisor about it. The rest of the product works without it.

8. Your Rights

Subject to applicable law (GDPR, Swiss nDSG), you have the right to access, correct, export, and delete your personal data, to object to or ask us to restrict certain processing, and to withdraw consent at any time. You can delete your account yourself at any time from Settings: it takes effect immediately, cancels any active subscription, and cannot be undone. The retention described in Section 6 is the only thing that survives it, and your rights of access and correction continue to apply to what survives. For access, correction or export requests, email support@dosavy.com.

If you think we have handled your data wrongly, you can complain to a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), and in the EU/EEA the authority where you live or work.

9. International Transfers

Several of the providers in Section 7 are outside Switzerland and the EU/EEA. For those marked as such, we rely on the Standard Contractual Clauses contained in the data processing terms the provider publishes (GDPR Art. 46, nDSG Art. 16(2)(d)). Providers hosting your data inside the EU are covered by an adequacy decision and need no further safeguard.

The AI advisor is the exception, and we would rather say so than bury it. The text of your advisor questions is processed by DeepSeek in China. China is not covered by an adequacy decision from Switzerland or the EU, and we have no Standard Contractual Clauses or equivalent contractual safeguard in place for that transfer. We are not going to claim one we do not have.

What that means in practice: once your question reaches China, the rights this Policy describes may not be enforceable there, local law may permit authorities access to it on terms you could not challenge from here, and we cannot promise a remedy we have no contract to enforce. Because these questions are health-related, this is sensitive data going to a country without either of the usual protections.

We therefore make this transfer on the basis of your explicit consent to it (GDPR Art. 49(1)(a), nDSG Art. 17(1)(a)), informed by this section, which is why it states the risk rather than summarising it. Using the advisor is entirely optional. Nothing else in Dosavy sends anything to DeepSeek: protocols, dose logging, reminders, the compound library and the calculators all work without it. If this transfer is not acceptable to you, do not use the advisor, and if you have already used it, Section 6 says what is kept and Section 8 how to reach us about it.

10. Security

Data is encrypted in transit. Access to your rows in our database is enforced by the database itself, per user, rather than by application code alone, so one account cannot read another's protocols or logs. No system is perfectly secure; if a breach affects your personal data and the law requires it, we will notify you and the relevant authority.

11. Children

The Service is for adults aged 18 or over. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

12. Automated Decision-Making

We do not make decisions about you by automated means that produce legal or similarly significant effects. The AI advisor generates information for you to read and verify; it decides nothing about you, and nothing it says is a medical decision: see the Terms of Service.

13. Changes to This Policy

We may update this Policy from time to time. Each version carries the version number and date shown at the top of this page, and the version you accepted is recorded against your account. Material changes, including adding a provider that receives your data, will be flagged at sign-in where feasible.

14. Contact

Questions about this Policy, or requests to exercise your data rights, can be sent to support@dosavy.com. We aim to respond within 30 days, as GDPR and the nDSG require.