DoselyDosely
HomePrivacyTermsDelete Account
Download
Dosely · Legal

Privacy Policy

Effective Date: February 19, 2026  ·  Last Updated: August 9, 2026

EFN Group LLC ("we," "us," or "our") operates Dosely ("the App"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

01Information We Collect

1.1 Account Information

When you create an account, we collect:

  • Email address
  • Authentication credentials (managed by Supabase Auth)
  • Apple ID information (if you sign in with Apple — iOS app only)
  • Google account information (if you sign in with Google)

1.2 Profile Information

During onboarding, you may provide:

  • Research interest areas (e.g. recovery, fat loss, cognitive)
  • Experience level with peptide research
  • Where you are in your research journey

This information is stored in your user profile and is used solely to personalize your app experience.

1.3 User-Generated Data

As you use the App, you may create:

  • Protocols (compound names, dosages, frequencies, notes)
  • Injection logs (dates, compounds, dosages, injection sites, notes)
  • Cycle records (names, durations, start/end dates)
  • Cost estimations
  • Vial inventory records
  • Progress photos (optional — iOS app only)

1.4 Device and Usage Information

We may automatically collect:

  • Device type and operating system version
  • App version
  • Push notification tokens (if you enable notifications)
  • Advertising identifier (IDFA) — on iOS only, and only if you allow tracking when the App asks (see Section 3.1)

We do not collect location data, contacts, or browsing history. The Android app does not collect an advertising identifier and does not request camera or photo access.

02How We Use Your Information

We use your information to:

  • Provide the App's functionality: Store your logs, protocols, and research data so you can access them across sessions.
  • Process payments: Manage your subscription through RevenueCat and the Apple App Store (iOS) or Google Play (Android).
  • Vial label scanning (iOS app only): Process photos of vial labels through OpenAI's vision API to extract compound information for your inventory. Only the vial label image is sent — no personal data is included. This feature does not exist in the Android app, which sends nothing to OpenAI.
  • Send notifications: Deliver protocol reminders and app updates if you opt in.
  • Improve the App: Analyze usage patterns through Mixpanel (see Section 03) to fix bugs and improve features.
  • Measure advertising: Determine whether an install or a subscription came from one of our ads, so we know which ads are worth running. See Section 3.1 for exactly what is shared, with whom, and when.

We do not:

  • Sell your personal data to third parties.
  • Use your health-related data — protocols, injection logs, vials, cycles, or photos — for advertising.
  • Share your data with data brokers.
  • Show ads inside the App.
  • Make automated health decisions based on your data.

03Third-Party Services

The App uses the following third-party services, each with their own privacy policies:

ServicePurposeData Shared
SupabaseAuthentication, database, cloud functionsAccount data, user-generated content
RevenueCatSubscription managementAnonymous user ID, purchase history
MixpanelProduct analyticsUsage events (screens viewed, features used, subscription funnel), device type and OS version, app version, and a user identifier
OpenAIVial label scanning (image-to-text) — iOS app onlyVial label photos only (no personal data)
Apple Sign InAuthentication (iOS app only)Apple ID token
Google Sign-InAuthenticationGoogle ID token
Apple App Store / Google PlaySubscription billing and purchase processingPurchase and subscription status
Meta Platforms, Inc.Advertising measurement and attribution (iOS app only)App events (install, registration, first protocol created, trial start, subscription); advertising identifier (IDFA) only if you allow tracking
TikTokAdvertising measurement and attribution (iOS app only)App events (install, app open, registration, first protocol created, trial start, subscription purchase including plan and price); only if you allow tracking: a hashed (unreadable) version of your email address and an account identifier for ad-match accuracy, and the advertising identifier (IDFA)

We require third-party providers to handle your data in accordance with their published privacy policies and applicable data protection laws.

3.1 Advertising Measurement (Meta & TikTok — iOS app only)

The iOS App includes the Meta (Facebook) and TikTok Business SDKs so we can measure how our advertising performs — specifically, whether an install or a subscription came from an ad we paid for. They are used for measurement only; the App does not display ads. The Android app includes neither SDK, collects no advertising identifier, and sends no advertising or measurement events to Meta or TikTok; the rest of this section applies to the iOS app only.

The app events reported to Meta Platforms, Inc. and TikTok are: install, app open, account registration, first protocol created, free-trial start, and subscription purchase (including the plan and its price). No health-related content is included in them. If — and only if — you allow tracking (see below), a hashed (unreadable) version of your email address and an account identifier are also shared with TikTok to improve how accurately it matches a subscription to an ad; your readable email address is never shared with either partner.

When you first reach the main app, iOS asks for your permission to track (Apple's App Tracking Transparency prompt). Only if you allow it is your device advertising identifier (IDFA) sent along with those events — that identifier is what lets Meta and TikTok attribute an install or a subscription to a specific ad.

If you decline, the IDFA is not shared, the hashed email and account identifier are not shared, and the events are not tied to your identity; Meta and TikTok receive only aggregate, privacy-preserving attribution signals (Apple's SKAdNetwork and the partners' aggregated event measurement). Your protocols, injection logs, vial inventory, cycles, and photos are never shared with Meta or TikTok.

This data is used only to measure and improve our advertising. We do not sell personal information. You can change your choice at any time in iOS Settings → Privacy & Security → Tracking. The partners' handling of the data they receive is governed by Meta's privacy policy and TikTok's privacy policy.

04Data Storage and Security

  • Your data is stored on Supabase's infrastructure (cloud-hosted PostgreSQL databases).
  • All data is protected by Row Level Security (RLS) policies — you can only access your own data.
  • Data is transmitted over HTTPS/TLS encryption.
  • Authentication tokens are stored securely on your device.
  • We do not store your password — authentication is handled by Supabase Auth.

While we implement reasonable security measures, no system is completely secure. We cannot guarantee absolute security of your data.

05Data Retention

  • Your data is retained as long as your account is active.
  • If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.
  • Vial label images sent to OpenAI for scanning (iOS app only) are not stored by us after processing. OpenAI's own retention policies apply to data they receive.
  • App events and, where permitted, the advertising identifier sent to Meta for ad measurement are retained under Meta's own policies; we do not control that retention.
  • Anonymized, aggregated data may be retained indefinitely for analytics purposes.

06Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access your personal data.
  • Correct inaccurate data.
  • Delete your account and associated data.
  • Export your data in a portable format.
  • Opt out of push notifications at any time through your device settings.
  • Opt out of ad tracking at any time in iOS Settings → Privacy & Security → Tracking (iOS app only — the Android app does no ad tracking). The App keeps working exactly the same either way.
  • Withdraw consent for optional data processing.

To exercise any of these rights, contact us at app@dosely.cc.

6.1 California Residents (CCPA)

If you are a California resident, you have the right to:

  • Know what personal information we collect and how it is used.
  • Request deletion of your personal information.
  • Opt out of the sale or sharing of personal information. We do not sell personal information. The only sharing for advertising purposes is the ad-measurement data described in Section 3.1; it is tied to your advertising identifier only if you allow tracking, and that stops as soon as you withdraw the permission.
  • Non-discrimination for exercising your privacy rights.

6.2 European Residents (GDPR)

If you are in the European Economic Area, our legal bases for processing your data are:

  • Contract performance: To provide the App's functionality.
  • Legitimate interest: To improve the App and prevent fraud.
  • Consent: For optional features like push notifications, and for advertising measurement where you allow tracking (Section 3.1).

You may contact your local data protection authority if you have concerns about our data practices.

07Children's Privacy

The App is not intended for anyone under the age of 18. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected data from someone under 18, we will delete it promptly. If you believe a minor has provided us with personal data, contact us at app@dosely.cc.

08Push Notifications

We may send push notifications for protocol reminders and app updates. You can opt out at any time through your device's notification settings.

09Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the App or via email. Your continued use of the App after changes constitutes acceptance of the updated policy.

The "Last Updated" date at the top of this policy indicates when changes were last made.

10Contact

For privacy-related questions or requests, contact us at:

EFN Group LLC
Email: main@efngroup.biz

For general inquiries: app@dosely.cc

© 2026 EFN Group LLC. All rights reserved.
Home · Terms of Service