Privacy Policy

1. Who we are

Dosely ("Dosely", "we", "us") is a mobile application operated by Nextleap App Studio, a sole proprietorship based in Godda, Jharkhand, India.

For the purposes of applicable data protection law, Nextleap App Studio is the data controller (or, under India's Digital Personal Data Protection Act, 2023, the Data Fiduciary) for the personal data described in this policy.

2. What we collect

Most of what Dosely holds is information you type in yourself. We have grouped it by category below.

Sensitive personal data. Information about your medication, weight, symptoms and lab results is health data, which most privacy laws treat as a special or sensitive category requiring extra protection. We handle it on that basis. We do not require you to provide it — the app simply cannot do much without it.

We do not collect your payment card details (Apple and Google handle billing), your precise location, your contacts, or your advertising identifier.

3. Why we use it

• To run the app you asked for — showing your dose history, next-dose countdown, estimated medication level, rotation history, weight, body-measurement and nutrition trends.
• To send reminders you have configured, such as an upcoming dose or a water reminder.
• To surface patterns in your own logged data — for example, which day of your dose cycle you have most often recorded food noise on. These reflect your history. They are not predictions, diagnoses or clinical findings.
• To keep the app working and improve it — diagnosing crashes, fixing bugs, and understanding which features are used. Usage analytics (Google Analytics for Firebase) record how the app is used, such as which screens are opened and which buttons are tapped. They never include a health value: no medication, dose, weight, food, symptom or note. Usage analytics and crash reports are linked to your account ID so we can see problems in context. You can turn usage analytics off at any time in the app under Profile → Share usage analytics.
• To manage subscriptions and confirm entitlement to paid features.
• To meet legal obligations where they apply to us.

We never use your health data for advertising, and we never sell it. We do not share it with data brokers, insurers, employers or pharmaceutical companies.

4. Legal basis

Where the GDPR or UK GDPR applies, we rely on: your explicit consent for processing health data (Article 9(2)(a)); performance of a contract for account and subscription functions; and our legitimate interests in keeping the service secure and functional. Where India's Digital Personal Data Protection Act, 2023 applies, we process your personal data on the basis of the consent you give when you accept this policy and the in-app disclaimer.

You can withdraw consent at any time by deleting your account. Withdrawal does not affect processing carried out before withdrawal.

5. Who we share it with

We share data only with service providers who process it on our behalf under contract, and only as far as needed to run the app.

We may also disclose data if required by law, court order or a valid request from a public authority, or to protect the rights and safety of our users or the public. If ownership of Dosely changes through a merger or acquisition, your data may transfer to the new owner, who would remain bound by this policy or give you notice of any change.

6. Apple Health and Health Connect

If you grant permission, Dosely can read steps, activity, sleep, weight and resting heart rate from Apple HealthKit, and can write back only what you typed into Dosely yourself — weight, water, food, steps and sleep. Each type has its own switch. This is entirely optional and the app works without it.

• We request only the data types needed for the features you use.
• Data read from HealthKit or Health Connect is never used for advertising or marketing, and is never sold or shared with third parties for their own purposes.
• We do not use HealthKit or Health Connect data for any purpose other than health and fitness features within Dosely.
• You can revoke access at any time in your device settings. Revoking it stops future syncing; data already stored in Dosely remains until you delete it. When you delete your Dosely account, the entries Dosely itself saved to Apple Health are removed too; data from other apps and devices is never touched.

7. AI features

Dosely Pro includes AI food logging, which uses Google's Gemini models via Firebase AI Logic to estimate nutrition from a meal photo or a typed description. Dosely asks for your explicit permission before the first request and sends nothing until you agree. You can decline and enter food manually.

• Only the photo or text for that request is sent. No medication, dose, weight, age, sex or other health detail is included, and your history is not uploaded.
• Dosely does not store the photo: it is read into memory, sent, and discarded. How Google handles the request is governed by Google's terms.
• AI output is an estimate. Nutrition figures from a photo or description are approximate and you can edit them before saving. They are not medical advice, a diagnosis, or a prediction of your results.
• You can use Dosely without these features by entering food manually.

8. How long we keep it

• On your device first. Dosely stores your records on your phone. While you are signed in, most of them are also backed up to our cloud so they survive a new phone. Signing out removes the data from the phone; your cloud copy stays until you delete your account.
• Progress photos stay only on your device. They are never uploaded, synced or shared, and are lost if you sign out, delete your account or delete the app.
• While your account is active, we keep your health and profile data so your history stays intact.
• When you delete your account, we delete your personal and health data from our live systems within 30 days, and from encrypted backups within 60 days.
• Crash reports and usage analytics are linked to your account ID and kept for a limited period by Google Firebase under its retention settings. They contain no health values. Turning usage analytics off stops new analytics data from being collected.
• Records we must keep by law, such as transaction records for tax purposes, are retained for the period the law requires.

See Delete your account for how to start this.

9. Security

We protect your data with encryption in transit (TLS) and at rest, authenticated access controls so that only you can reach your records, and least-privilege access for our own staff. Data stored locally on your device is protected by your device's own encryption and lock screen.

No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant supervisory authority as required by applicable law.

10. Your rights

Depending on where you live, you have some or all of the following rights:

• Access — get a copy of the personal data we hold about you.
• Correction — fix anything inaccurate or incomplete.
• Deletion — have your data erased. See Delete your account.
• Portability — receive your data in a machine-readable format. To request a copy, email us.
• Withdraw consent — at any time, without affecting prior processing.
• Object or restrict — ask us to stop or limit certain processing.
• Complain — to your data protection authority. In India this is the Data Protection Board; in the EU or UK, your national supervisory authority.

To exercise any of these, email contact@nextleapapps.com. We will respond within the period required by applicable law and may need to verify your identity first.

11. Children

Dosely is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact contact@nextleapapps.com and we will delete it.

12. International transfers

Our service providers may process data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. Your cloud data is stored with Google Firebase in the United States (Google Cloud region us-central, Iowa), so data from users in India and elsewhere is transferred to and processed in the United States.

13. Changes to this policy

We may update this policy as the app changes or the law does. We will update the date at the top, and for material changes we will notify you in the app or by email before they take effect. Continuing to use Dosely after a change means you accept the updated policy.

14. Contact and grievances

For any privacy question or request:

Email: contact@nextleapapps.com
Entity: Nextleap App Studio
Address: Godda, Jharkhand, India
Grievance Officer: Priyanshu Shekhar, Proprietor, contact@nextleapapps.com