Privacy Policy

DoseStreaks is built local-first. Your medications, dose history, vitals, appointments and profile are stored on your own device and the app works fully offline, without an account.

If you create an account, that data also syncs to your own private space in our database so you can reach it from another device. Syncing is what an account is for — it is not a condition of using the app.

• Account details — your email address, and your first name and surname if you enter them.
• Health information you enter — medications and schedules, dose logs, blood glucose and blood pressure readings, appointments, and medical aid scheme and plan.
• Reminder delivery details — if you enable reminders, we store the notification address for that device and the times you chose, so the reminder can be sent.
• Diagnostic error reports — see “When something breaks” below.

Some settings are deliberately excluded from syncing and are only ever held on the device you set them on:

• Your reminder settings and per-session times
• Your light or dark theme preference
• Your medical aid membership number

Only you. Every record is bound to your account at the database level, so one account cannot read another account’s rows — this is enforced by the database itself, not only by the app.

The single exception is your Health Team: if you invite someone with an invite code, they see exactly the level of detail you chose when you invited them, and you can remove them at any time. Invite codes expire after 30 days.

We do not sell your information, we do not share it with advertisers, and we do not use it for advertising.

Under the Protection of Personal Information Act, information about your health is “special personal information” and gets stronger protection. By entering health information into DoseStreaks you consent to us processing it for the purpose of providing the app to you — tracking your doses, showing your history, sending the reminders you asked for, and syncing to your other devices.

You can withdraw that consent at any time by deleting your account, which erases the information.

If the app hits an error, it sends a diagnostic report so we can fix it. These reports are limited on purpose:

• They contain the error and where in the app it happened — never the contents of your medications, vitals or logs.
• Email addresses, long digit sequences (ID, phone and medical aid numbers) and access tokens are stripped out before the report leaves your device.
• They are only sent when you are signed in, and are deleted after 30 days.

We use a small number of providers to run the service. They process data on our instructions only:

• Supabase — database, authentication and reminder delivery.
• Vercel — website hosting.
• Google — only if you choose to sign in with Google, and for delivering notifications to Android devices.

Under POPIA you may ask us to:

• Confirm what personal information we hold about you
• Correct information that is wrong
• Delete your information
• Object to how we are processing it

You can delete everything yourself from Profile → Settings. Deleting your account permanently removes your account and all of the data attached to it — medications, dose history, vitals, appointments, Health Team links and reminders. It cannot be undone, and we do not keep a copy.

You also have the right to complain to the Information Regulator of South Africa.

DoseStreaks is intended for adults. If you are under 18, a parent or guardian should agree to this policy and help you manage the app. If you believe a child has used the app without that consent, contact us and we will delete the account.

If we change how we handle your information we will update this page and change the date above. Significant changes will be surfaced in the app.

For anything in this policy, including a request about your data, email DoseStreaks@gmail.com.