Privacy Policy for Dosely

Last updated: 28 September 2026

Dosely is a medication reminder app. This policy explains what information Dosely keeps, where it is kept, who can see it, and how to delete it.

In short: you can use Dosely without an account, and then everything stays on your iPhone. If you create an account, your medication records are stored on Dosely's server so they can reach your other devices and the people you choose to share them with. They are never sold, never used for advertising, and never used to track you.

Using Dosely without an account

Choose "Start without an account" on the first screen and Dosely works entirely on your iPhone. Every feature works except syncing, sharing and the server's backup alerts (described below). Nothing about your medications is sent to us or to anyone else.

What Dosely stores on your iPhone

Whether or not you have an account, Dosely keeps these in the app's own storage on your device:

• The people you add (name, emoji and color, and a photo if you choose one; photos stay on your iPhone and are never uploaded or synced)
• Medications, vitamins and supplements: name, dose, form, schedule, instructions, notes, what each one is for, and supply counts
• The doses marked as taken, skipped or missed, and when
• Your settings, such as appearance, language and reminder style

Sign-in details are kept in your iPhone's Keychain. This information is included in your iPhone's own backup (iCloud or computer) if you have backups turned on, under Apple's terms. Without an account, the developer of Dosely cannot see any of it.

What we store when you have an account

An account can be created with an email and password, or with Sign in with Apple. Accounts are run by Supabase, the service that hosts Dosely's server. Once you are signed in, the server holds:

• Your account: your email address, and a display name if you give one or Apple shares one. The display name is what people you share with see ("Rawan shared Mom's medicines with you").
• The people you track medication for: their name, emoji and color.
• Their medications: name, dose, form, schedule, instructions, notes, supply count and what each is for.
• The history: every dose marked taken or skipped, when, and which account marked it.
• Your time zone, so the server knows when a dose is late.
• Sharing records: who you have shared a profile with, and invitations you have sent (stored only as a scrambled code, never the invitation itself).
• Your devices: an identifier for each phone that should receive push notifications.

Passwords are handled by Supabase. Dosely never sees or stores your password, and a forgotten one can be reset by email.

This is health information, so: it is never sold, never used for advertising, and never used to build a profile of you. It exists only to sync your medications between your own devices and to show them to people you have explicitly invited. The server's database rules were tested to confirm that somebody who has not been invited sees nothing at all.

Your reminders never depend on the server. They are alarms and notifications scheduled on your iPhone, and they ring even with no connection.

Sign in with Apple

If you use Sign in with Apple, Apple tells Dosely an identifier for your Apple ID and, the first time only, the name and email address you choose to share. You may hide your real email with Apple's private relay address. The email and identifier are used to create your account; the name is shown in the app and, as your display name, to the people you share with. You can stop using Sign in with Apple with Dosely at any time in iOS Settings ▸ your name ▸ Sign-In & Security ▸ Sign in with Apple.

Sharing a profile

Nobody can see your medications unless you invite them. You share one profile at a time, from Settings ▸ People, as Can view or Can edit:

• The person you invite sees that profile's medications and dose history. With Can edit, they can also mark doses taken or skipped for it. They never see your other profiles.
• An invitation is a link or QR code. It is meant for one person, expires, and is stored on the server only in scrambled form, so a copy of the database gives nobody access. You can also share with someone by email address.
• The person you invite can open the link in Dosely, or in any web browser, including on Android. The web page confirms their email address with a one-time code before showing anything. The page is hosted by Cloudflare, and it talks only to Dosely's server.
• Either of you can end a share at any time, and access stops immediately.

When you share a profile, you are choosing to show that person's health information to someone else. Please share only profiles you are entitled to share.

Push notifications

With an account, Dosely can send you push notifications through OneSignal, a push notification service. These are used for what only the server knows: a dose on a profile you look after that has gone unmarked, a backup alert when one of your own doses is still unmarked well after its time, a shared medicine running low, a nudge from someone who looks after you, and sharing requests.

To deliver them, OneSignal receives your device's push token and your Dosely account ID, so a notification can reach each phone you are signed in on. The text of a notification may include a person's name (for example "Mom hasn't logged a dose") but never names a medicine, because it can appear on a locked screen. OneSignal's software also records basic, anonymous information about how notifications are delivered and opened; it is not linked to you and is not used for advertising. Signing out removes the phone from your account so pushes stop reaching it. Push notifications are optional and can be turned off in iOS Settings.

Google Calendar (optional)

This feature is not enabled in version 1.0. When it is available and you choose to connect Google Calendar, Dosely asks Google for read-only access to your calendars so it can show your appointments next to your medication schedule.

• Sign-in tokens are stored only in your iPhone's Keychain
• Appointment details are used on your iPhone only, to show them and to schedule optional reminders
• Nothing from your calendar is sent to Dosely's server or to any third party
• You can disconnect at any time in Settings, which deletes the stored tokens and revokes access at Google. You can also remove access at myaccount.google.com/permissions

Dosely's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Permissions

Notifications and Alarms. Used to remind you when a dose is due. Alarms use Apple's AlarmKit so they sound even in Silent mode. You can turn them off in iOS Settings at any time.

Microphone and Speech Recognition. Used only when you tap the microphone button to add a medication by voice. Speech is turned into text on your iPhone; Dosely does not record, store or send audio. On an iPhone that can't do this on the device, the feature is not offered and you can type instead.

Apple Intelligence (on supported devices). When available, the on-device language model reads your typed or dictated sentence to work out the medication, dose and times. This happens on your iPhone.

Face ID / Touch ID. Optional app lock. Authentication is handled by iOS; Dosely only receives a yes-or-no result and never sees your biometric data.

No tracking, no advertising

• No advertising, and no advertising or analytics companies' tools in the app
• No tracking across other apps or websites
• No selling or renting of personal information
• Your information is shared only with the services that run Dosely (Supabase for accounts and storage, OneSignal for push notifications, Cloudflare for the sharing web page), and with the people you invite

Deleting your data and your account

Single items. You can delete any medication, person or history entry in the app. If you are signed in, the deletion syncs, and the item disappears from your other devices and from anyone you shared it with. It is removed from the server for good when you delete your account.

Everything on the iPhone. Settings ▸ Privacy & Security ▸ Delete All Data removes every person, medication and logged dose from this iPhone and cancels all reminders. If you are signed in, those deletions sync to your account too.

Your account. Settings ▸ Account ▸ Delete Account permanently deletes your account from the server, together with everything stored under it: your profile, the people, medications and dose history you own, your shares and invitations, sharing requests, and your registered devices. Anyone you shared with loses access immediately, and this phone stops receiving push notifications. It cannot be undone. Doses you marked on a profile someone else shared with you stay in their history, but are no longer linked to you.

Deleting your account does not erase the medications on your iPhone, because they are still yours. Use Delete All Data to remove those too. Deleting the app from your iPhone removes everything the app stored on it.

Our service providers (Supabase, OneSignal and Cloudflare) may keep limited technical records, such as delivery logs, for a short time under their own privacy policies.

Children

Dosely is not directed at children, and accounts are meant for adults. A parent or carer may add a profile for a child they look after; that profile is handled exactly like any other profile described above. If you believe a child has created an account, please contact us.

Medical disclaimer

Dosely is a reminder tool. It does not provide medical advice, diagnosis or treatment, and it does not replace your doctor or pharmacist. Always follow the instructions on your prescription.

Changes

If this policy changes, the new version will be published at this address with an updated date.

Contact

Questions or requests about privacy in Dosely, including deleting an account you can no longer sign in to: r1alfarraj@outlook.com