Privacy

Privacy Policy

Effective 4 November 2026

DoseWell is a personal tracker. It records what you enter: injections, vials, check-ins, fasting, food, workouts, supplies and related health data.

The short version: your log syncs to your DoseWell account on our server in Canada, so it reaches your other devices. Your notes and the names you type are encrypted on your iPhone first, so we can't read them; the rest of your log isn't encrypted that way. Photos and files stay in your own iCloud. Data from Apple Health stays on your iPhone. When you use Ask DoseWell, the parts of your log needed to answer go to our AI provider. We don't sell or share your data for advertising, and there's no analytics or tracking.

Your account

You sign in to DoseWell with Apple. We never see your Apple password. Our account server, run on Supabase in Canada (Central), keeps an account record for you:

• an account ID;
• the email address Apple gives us. If you choose Hide My Email, it's a private relay address and we never see your real one;
• your name, if you let Apple share it;
• the date you joined, your plan and a sync setting.

The account is never used for marketing, advertising or tracking.

Your log and sync

Everything you type or add is stored on your iPhone, and it works offline. While you're signed in, your records also sync to your account on the same server in Canada, so your other devices get them and you can get them back after a reinstall: doses, vials and pens, protocols and schedules, check-ins (including the weight, sleep and resting heart rate you enter or confirm there), water you log, food, workouts you log, fasts, supplies and costs, injuries, lab results, compounds you add, your settings and your progress milestones.

• Encrypted on your iPhone before they sync: your notes, side-effect text, the names you give protocols, injuries and devices, and your Ask DoseWell chat history. They're encrypted with a key that's made on your iPhone and never sent to us, so we can't read them. The key reaches your other Apple devices through iCloud Keychain, and you can save a recovery key (Settings → Account). If you lose both, those encrypted items can't be recovered, even by us.
• Everything else in your log isn't encrypted that way. It's encrypted on its way to the server and each account can only reach its own rows, but the values (such as compound names, amounts, dates, weights and lab results) are readable on the server. People who run the service, and Supabase as our host, could technically access them. We don't look at them except when needed to run or fix the service, or if the law requires it.

iCloud: photos and files

Progress and injury photos, and the documents you attach, aren't sent to our server. They stay on your iPhone and, if you're signed into iCloud, sync through your private iCloud database to your other Apple devices. Apple holds them under your Apple Account; we have no access to them.

Apple Health

With your permission, DoseWell reads weight, heart rate, resting heart rate, heart rate variability, sleep, steps, active energy, exercise time, workouts, water, protein, body fat, waist and blood pressure from Apple Health, so you don't have to type them in.

• On your iPhone only. Data read from Apple Health is kept in a cache on your iPhone that isn't part of iCloud sync, iCloud backup or our sync. Ask DoseWell doesn't read that cache.
• Never shared. It isn't sent to us or anyone else, never sold, and never used for marketing, advertising or data mining. It's only used to show your own records back to you in the app.
• If you copy a value into your log, it becomes part of your log. A weight or sleep value you enter or confirm in a check-in, or a Health workout you add a note to, syncs and can go to Ask DoseWell like anything else you log.
• What the app saves to Apple Health: the weight, blood pressure, waist and body fat you type in a check-in, protein you log, plain water you log (other drinks aren't written as water), and caffeine from drinks during a fast.

You can change these permissions at any time in the Health app or in iOS Settings.

Freeze and crash reports

If the app freezes or crashes, it keeps a short technical record on your iPhone: the time, the app build, which screen it was on, and Apple's crash and hang reports. None of it comes from your log, and it only leaves your iPhone if you choose to share it.

Ask DoseWell (AI)

Ask DoseWell answers questions about your log, your health and compounds, and can draft changes to your log that you confirm. It's off until you agree to a consent screen the first time you open it, and you can turn it off in Settings.

• What's sent, only when you ask: your question, the last few messages of that chat, your active protocols (with the names you gave them), and the parts of your log needed to answer each question. That can be anything you've logged, from any date: doses, vials, supplies and costs, check-ins, notes, weight, water, food, fasting, workouts you've logged, sleep, injuries and lab results. Your iPhone reads your log and sends only what the question needs; our server passes it on and doesn't use your synced log to answer. For progress photos, only their dates and stamps are sent, never the photos or your files.
• Who processes it: our server (Supabase, in Canada) passes it to Anthropic, the maker of Claude, our AI service provider, to write the answer. Anthropic doesn't use it to train its models and deletes it within 30 days, except where it must keep it longer to enforce its usage policy or by law.
• Not end-to-end encrypted: AI chats are processed by our AI provider and are not end-to-end encrypted.
• What we keep: our server keeps no chats. It keeps a monthly count of your messages and their cost, linked to your account, to apply the monthly limit. Your chat history is saved on your iPhone and encrypted on your iPhone before it syncs to your account, so we can't read it.
• Quick log: your iPhone reads simple entries itself (like "500 mL water"), and those never leave it. Only the parts it can't read are sent the same way, to be turned into entries you check and save yourself.
• Your week: the weekly summary on Review sends the figures your iPhone works out from your last 7 days (such as weight change, water and protein against your goals, check-in averages and doses logged against your schedule). It's made at most once a week and kept on your iPhone.
• Lab reports: if you choose "Read a lab report", the PDF or photo you pick is sent the same way so the values can be read. It's used only to read it and isn't stored on our server; the values come back to your iPhone, and nothing is saved until you check them and tap Save. Remove anything you don't want read (such as your health card number) before you pick a photo.
• Suggestions: when Ask DoseWell offers to suggest a compound for the library, nothing is sent unless you tap Confirm (see "Suggesting a compound" below).
• Without your consent to Ask DoseWell, none of these are sent: Quick log uses only what your iPhone reads, and the weekly summary and lab reports aren't offered.
• Ask DoseWell won't tell you what dose to take and isn't a doctor. Talk to your prescriber about medical decisions.

Suggesting a compound

You can suggest a compound for the library (Library → Suggest a compound, or through Ask DoseWell).

• What's sent: the name, type, your note and link, if you add them. Your request is stored on our server (Supabase, in Canada) without your account. The same name from several people is counted as votes.
• "Tell me when it's added": only if you turn this on, we keep your account ID with that request so the app can tell you when it's in the library. It's removed once you've been told.
• Daily limit: to allow 5 suggestions a day, the server counts how many you sent each day (your account ID and the date only, kept apart from what you sent).
• Searches with no results: when a Library search finds nothing, the app sends the search words (at most once a day for the same words, while you're signed in) so we can see what people look for. They're stored as a count per search term, with no account or device ID. Words that look like personal details (an email address, a link or a long number) are never sent.
• Links you add are only used to research the compound and are never shown to anyone.

Food barcodes

When you scan or type a barcode in Food, the app looks it up on Open Food Facts (openfoodfacts.org), a free, open food database. Only the barcode is sent, with nothing about you; like any website, Open Food Facts sees your IP address (its privacy policy). Products you scan are kept on your iPhone so they don't need looking up again. Nutrition data © Open Food Facts contributors, under the Open Database License.

Discover

Discover shows news, guides and videos. To fill it, the app asks our server, discover.vialchemy.app, for the public feed. These are anonymous requests: they carry nothing about you (no account, ID, stack, compounds or analytics). Like any website, the server sees your IP address to answer the request. Filtering by your stack happens on your iPhone.

• The short summaries are written by AI (Anthropic's Claude) on our server, from the public source article. No user data is sent to the AI.
• Video thumbnails load from YouTube's image servers (i.ytimg.com), so YouTube sees your IP address. Videos play in YouTube's privacy-enhanced embed (youtube-nocookie.com, with nothing stored) or in the YouTube app, under Google's privacy policy.
• "Read at source" opens the publisher's website, which has its own policy.

Library and vial images

The app downloads the compound library and vial images from our server. These are the same files for everyone, requested anonymously: they carry no account or personal data, and they never reveal which compounds you take. Like any website, the server sees your IP address to answer the request.

Library profiles

Profiles you download from vialchemy.app are files on your iPhone. Opening one adds it to your Library on your device (and your iCloud, like everything you add). Nothing is sent back to us.

What we don't do

• No analytics, advertising, tracking or third-party SDKs.
• No selling your data, and no sharing it except with the service providers named here (Supabase, Anthropic, Apple and Cloudflare) to run the features described.

This website

getdosewell.com is hosted by Cloudflare, which processes requests (including IP addresses) to serve and protect the site. We don't use analytics, advertising or tracking on the site, and it loads nothing from other companies.

Beta sign-up: to get the TestFlight link, you give us your name and email address. We keep them in Cloudflare's storage (Workers KV) and use them only for the beta. If you also tick the optional box, we'll email you about app updates and promotional items, like new merch, and we keep the date you agreed. Your details are never sold or shared. You can unsubscribe at any time, or have your details deleted, by emailing hello@getdosewell.com. It's separate from the app: nothing you log in DoseWell is connected to it.

Lifetime membership interest

The lifetime membership form is closed. If you filled it in, we keep your name, email address, phone type (iPhone or Android) and your note, if you add one, in Cloudflare's storage (Workers KV). We use them only to contact you about the lifetime membership. Nothing is charged through the form, and it isn't connected to anything you log in DoseWell. To have your details deleted, email hello@getdosewell.com.

App lock, notifications and widgets

If you turn on the lock (Settings → Privacy), Face ID or your passcode is checked by iOS; we never receive face data. A DoseWell PIN, if you set one, is stored only as a one-way hash in your iPhone's Keychain.

Reminders are scheduled on your iPhone. With Private notifications on (the default), dose reminders don't name anything. Widgets and Live Activities read your data from the app on the same device, and widgets hide their contents on the Lock Screen.

Exports

When you export or back up your data, the file is created on your iPhone and goes only where you choose to save or send it.

Deleting your data

Settings → Delete all data (in More) removes your records from this iPhone and, through sync, from your account and your other devices, and clears the Apple Health cache. The app first saves a backup to Files, which you can delete yourself. You can also manage iCloud data in iOS Settings → [your name] → iCloud.

Settings → Account → Delete account deletes your account record, your sign-in and everything synced to your account from our server straight away, and tells Apple to stop sharing your Apple ID with DoseWell. The app then asks separately whether to delete your log from this iPhone. Deleting the app alone removes its data from the iPhone but not from your account, so a reinstall can bring it back.

Health information

DoseWell records what you enter. It isn't medical advice and never recommends doses. Talk to your doctor or prescriber about your treatment.

Children

DoseWell isn't intended for anyone under 18. Right after you sign in, the app asks Apple for your age range; Apple tells DoseWell only whether you're 18 or older. Sign-ins from anyone under 18 are deleted immediately, and nothing is logged.

Changes

If this policy changes, the new version will be posted here with a new effective date.

Contact

Questions about privacy: hello@getdosewell.com