Privacy Policy

DoseStreaks (“DoseStreaks”, “we”, “us”, “our”) is the responsible party for your personal information under the Protection of Personal Information Act 4 of 2013 (POPIA).

DoseStreaks supports both online and offline use. Your medications, dose history, vitals, appointments and profile are stored on your device, which lets the app keep working without a connection — anything you enter while offline is connected to your account and tracked online as soon as the app is back online.

Using DoseStreaks’ tracking tools requires a free account — that is what lets your information reach your own space in our database, so you can reach it from another device and it is not lost if you lose your phone. Our public website (the homepage and the health-guide articles) does not require an account.

• Account details — your email address, and your first name and surname if you enter them.
• Health information you enter — medications and schedules, dose logs, blood glucose and blood pressure readings, appointments, and medical aid scheme and plan.
• Health Team details — if you invite someone to your Health Team, the name and (if you add them) phone or WhatsApp number you enter for them, and the permissions you set for what they can see. This is personal information about that person, entered by you — only invite people who have agreed to it.
• Reminder and check-in delivery details — if you enable reminders or use check-ins, the notification address for that device and the times you chose, so a reminder or check-in can be delivered.
• Account-linked diagnostic reports — see “Diagnostic error reports” below.

Some things are deliberately excluded from syncing and stay only on the device you set them on:

• Your reminder settings and per-session times
• Your light, dark or system theme preference
• Your preferred text size
• Your preferred display language
• Your medical aid membership number

Your profile photo and any medication photo you add are also device-only — they are never uploaded, even when you have an account and sync is on. Scanning a medication label uses on-device text recognition to read it; the photo itself is never sent anywhere for processing.

Other users of DoseStreaks cannot see your information. Every record is bound to your account at the database level, so one account cannot read another account’s rows through the app — this is enforced by the database itself. People who operate, maintain or support DoseStreaks may access information as needed to run the service, investigate a problem, or comply with the law.

The exception is your Health Team: if you invite someone with an invite code, they see exactly the categories of information you chose when you invited them — for example medication names, medication details, adherence, vitals or appointments — and you can change or remove their access at any time. Invite codes expire after 30 days.

How we use your information may change and grow over time as DoseStreaks does. Where that happens, we will update this policy — see “Changes to this policy” below — and handle it on a lawful basis under POPIA, which may include your consent.

Under POPIA, information about your health is “special personal information” and gets stronger protection. By entering health information into DoseStreaks you consent to us processing it for the purpose of providing the app to you — tracking your doses, showing your history, sending the reminders and check-ins you asked for, syncing to your other devices — and the other uses described in this policy.

You can withdraw that consent at any time by deleting your account, which erases the information.

We keep the information in your account for as long as your account stays open. If you delete your account, we permanently delete it immediately — see “Your rights” below.

Account-linked diagnostic error reports are kept for 30 days and then automatically deleted. Separate crash-monitoring events may have a different provider-controlled retention period. An unused Health Team invite code expires after 30 days.

We rely on standard technical safeguards: all traffic to and from DoseStreaks is encrypted in transit (HTTPS/TLS), and your records are isolated at the database level so only your account can read them — enforced by the database itself, not only by the app. Access to the underlying infrastructure is limited to what is needed to run the service.

No system is completely secure and we cannot guarantee it, but we take reasonable steps to protect your information, consistent with POPIA’s security requirements.

Some errors produce a diagnostic report so we can fix them. These reports are limited on purpose:

• They contain the error and where in the app it happened — never the contents of your medications, vitals or logs.
• An account-linked report may show us your email address, so we can match it to your account if needed.
• Account-linked reports are sent only when you are signed in and are deleted after 30 days. Separate crash-monitoring events may be sent without sign-in so we can detect failures on public pages and during server or native execution.

By using DoseStreaks, you agree to our use of cookies and similar technologies, including analytics and any further technology we add over time to support the website, the app, or both.

Our public pages — the home page, the health library and the other pages you can read without signing in — use a third-party analytics service that counts visits and tells us which pages people find useful. It runs whether or not you have an account, and it records the page you viewed, roughly where in the world you are, and the site or search you arrived from. It never receives your medications, vitals, appointments or anything else you enter into the app.

Full detail on what is currently stored on your device is in our Cookies & Storage page.

We use a small number of service providers to run DoseStreaks. Under POPIA they act as “operators” — they process information only on our instructions, for the purposes described in this policy, not for their own purposes:

• Database and authentication providers — who store your account and health information, and handle signing in.
• Notification providers — who deliver the reminders and check-ins you asked for to your device.
• Hosting and analytics providers — who serve the website and app, and provide the analytics and other tracking technology described above.
• A third-party sign-in provider — only if you choose to sign in that way instead of with an email and password.

Some of the providers above may process or store information outside South Africa. Where that happens, we rely on the safeguards POPIA allows for cross-border transfers — such as contractual protections that require the provider to protect your information to a standard consistent with POPIA. If you would like more detail about where a specific provider processes your information, contact us.

Under POPIA you may ask us to:

• Confirm what personal information we hold about you
• Correct information that is wrong
• Delete your information
• Object to how we are processing it

You can delete everything yourself from Profile → Settings. Deleting your account permanently removes your account and all of the data attached to it — medications, dose history, vitals, appointments, Health Team links and reminders. It cannot be undone, and we do not keep a copy.

You can also export a PDF report of your medication and adherence history at any time, to keep for yourself or share with a healthcare provider.

DoseStreaks does not restrict use by age. If the person using DoseStreaks is under 18, a parent or legal guardian must read and agree to this policy on their behalf, and is responsible for supervising the account and the health information kept in it. If you believe a child is using DoseStreaks without appropriate parental or guardian involvement, contact us and we will assist, including deleting the account if asked to.

If we change how we handle your information we will update this page and change the date above. Significant changes will be surfaced in the app.

For anything in this policy, including a request about your data, email contact@dosestreaks.co.za.