Privacy policy

Dosely Inc. is a Delaware C corporation with its principal office at 501 Boylston Street, Suite 6100, Boston, MA 02116, United States. We are the controller of the personal information described here. Questions go to privacy@mydosely.tech.

• We do not run advertising trackers, and there are no third-party advertising cookies on this site.
• We do not buy personal information from data brokers.
• We do not ask for payment card numbers. If you subscribe, Stripe handles the card and we never see it.
• We do not store label photos after the medication name has been read from them.
• We do not ask for your diagnosis, your conditions, or your medical history. You may add free-text notes, and those are stored against your account and treated as health data under this policy.

Our model providers receive the medication name needed to produce your plain-language information, under business API terms that prohibit training on that traffic. The current live provider is OpenAI. If that changes, this page will say so.

Our hosting and database providers store the data on our behalf inside the United States. Stripe processes payments if you subscribe. That is the complete list of processors.

Medication names are health-adjacent data. We treat them with the same care we would give clinical health data: encrypted in transit and at rest, sent to a model provider only to produce your information and for nothing else, never sold, never used to train a model, and deletable by you at any time.

We are not a covered entity under HIPAA and Dosely is not a medical device or a clinical service. We nonetheless apply a health-data standard of care to the information you share with us.

Where the GDPR or UK GDPR applies to you, we rely on: fulfilling the service you signed up for; legitimate interests, to keep the service secure, prevent abuse, and understand aggregate usage; and consent, for anything optional, which you can withdraw at any time.

You can ask for a copy of what we hold, correct it, delete it, or object to a particular use. Most of it you can do yourself: medications delete from their cards and the whole account deletes from Settings.

For anything else, email privacy@mydosely.tech and we will answer within 30 days. We will not make you jump through hoops and we will not charge you for it. If you are in California, the CCPA rights to know, delete, and opt out of sale apply, and we do not sell personal information.

Dosely is not directed at anyone under 13. We do not knowingly collect information from children, and if we learn we have, we will delete it promptly. A minor may use Dosely only under the supervision of a parent or guardian who has agreed to this policy on their behalf.

If we change this policy in a way that matters, we will email account holders before it takes effect rather than quietly updating a date. This version is effective 1 January 2025.