Doza · Privacy Policy

The short version

• Your health data stays with you. Injections, doses, sites, side effects, weight, water, heart-rate readings and sleep data are stored on your iPhone (and, if you enable it, in your own private iCloud). We do not run a server that receives your health data, and we never see it.
• No account, no advertising, no sale of data. Doza has no sign-up, shows no ads, contains no advertising SDK and does not sell, rent or share your personal data with data brokers or advertisers.
• No cross-app tracking. Doza does not use the advertising identifier (IDFA) and does not track you across other companies' apps or websites.
• Two things do leave your device: anonymous crash and usage diagnostics (Firebase Crashlytics and Google Analytics for Firebase), and purchase receipts needed to run Doza Pro subscriptions (Apple and RevenueCat). Neither contains your health data. Diagnostics can be switched off in Settings.
• Doza is not a medical device and not a healthcare provider. Nothing in the app is medical advice. See the Terms of Use.

Who is responsible

The operator of Doza and the controller of any personal data processed through it is Murat Kuşlu, an individual developer based in İzmir, Türkiye ("we", "us"). You can reach us at murat.kuslu@outlook.com for any question or request about this policy.

Information the app stores on your device

Depending on which features you use, Doza stores the following on your device, in the app's private storage (SwiftData) and, where noted, in Apple's Health app (HealthKit):

• Treatment information you enter: medication and pen type, dose plan and dose steps, injection dates and times, injection sites, missed doses, notes, side-effect entries (symptom, severity, timing), the "no medication" mode setting.
• Health measurements you enter or the app derives: weight, water intake and containers, heart-rate readings taken with the iPhone camera or Apple Watch, derived values (resting heart rate, heart-rate variability, breathing-rate and stress estimates), sleep schedule, night-mode sessions, snoring events detected from microphone loudness, smart-alarm settings.
• Preferences: language, reminders and notification settings, focus areas, badge progress, Pro status, app settings.
• Reports you generate: PDF and CSV exports are created on the device and stored only where you choose to save or share them.

Doza reads and writes the Health app only with your explicit permission, one data type at a time, and only for the categories you approve (for example heart rate, weight, dietary water, sleep analysis, respiratory rate, heart-rate variability). You can withdraw any permission at any time in the Health app or in iOS Settings › Privacy & Security › Health.

Camera. The heart-rate measurement uses the rear camera and torch to read the colour of your fingertip (photoplethysmography). Frames are analysed in real time on the device and are never stored, transmitted or shown to anyone. The camera is only active during a measurement you start.

Microphone. Night mode can listen for snoring. The app measures loudness on the device to detect snoring events; no audio is recorded, stored or transmitted.

Motion. Some screens use the motion sensors for visual effects only; no motion data is stored.

iCloud (optional)

If you turn on iCloud backup in Settings, Doza mirrors its database into your private iCloud database (CloudKit) under your Apple Account. That data is encrypted by Apple in transit and at rest, is only available to your devices signed in with the same Apple Account, and is not accessible to us. Turning the feature off stops the sync; you can delete the data from iCloud in iOS Settings › Apple Account › iCloud › Manage Storage. Apple's own terms and privacy policy apply to iCloud.

Information that leaves your device

5.1 Crash and usage diagnostics (Google Firebase)

Doza uses Firebase Crashlytics (crash reports) and Google Analytics for Firebase (anonymous usage events, for example "measurement started", "report exported", screen views, treatment mode, Pro status) so that we can find bugs and understand which features are used. This data does not include your health entries, notes, readings, names or contacts. It includes technical information such as app version, iOS version, device model, language, country derived from the IP address, an app-instance identifier generated by Firebase, and timestamps. Google processes this data on our behalf under the Google Data Processing Terms and may process it on servers outside your country. We have disabled advertising features of the SDK; the advertising identifier is not collected, and the data is not used for advertising or shared with Google for its own purposes.

You can switch diagnostics off at any time in Settings › Privacy (Analytics and crash reports). The switch stops new data from being sent.

Firebase Remote Config is used to deliver a small set of configuration values (for example thresholds and feature flags) to the app. The request contains the same technical information as above and no health data.

5.2 Purchases (Apple and RevenueCat)

Doza Pro is an auto-renewing subscription or one-time purchase sold through Apple's In-App Purchase system. Apple processes the payment and holds your payment details; we never see your card number. To validate purchases and unlock Pro across your devices, Doza uses RevenueCat, which receives the Apple purchase receipt, an anonymous app-user identifier generated on the device, app and device information, and country and currency. RevenueCat does not receive health data. RevenueCat processes this data as our processor under its Data Processing Agreement.

5.3 Apple services

Push and local notifications, Live Activities, widgets, Apple Watch sync and the Health app are provided by Apple on your device. Apple's privacy policy governs those services. Doza does not run its own notification server; reminders are scheduled locally on the device.

5.4 Nothing else

Doza does not send your data anywhere else. There is no advertising network, no social login, no e-mail collection and no third-party analytics beyond Firebase.

Why we process this information (legal bases)

Where the GDPR, the UK GDPR, the Turkish Personal Data Protection Law (KVKK) or similar laws apply, our legal bases are:

• Performance of the contract with you (providing the app's features, including the storage of the information you enter on your device and purchase validation).
• Your consent for reading and writing the Health app, using the camera and microphone, sending notifications, and for the special-category health information you choose to enter. You can withdraw consent at any time by revoking the permission or deleting the data.
• Our legitimate interest in keeping the app stable and understanding usage (anonymous diagnostics), balanced against your interests and with an opt-out available in the app.
• Legal obligations, for example tax and accounting rules that apply to purchase records held by Apple and RevenueCat.

Retention

Data stored on your device stays there until you delete it in the app (individual entries, "Delete all data" in Settings) or uninstall the app. iCloud data stays until you disable sync and delete it, or delete it via iOS Settings. Firebase crash and usage data is retained by Google for up to 90 days for detailed event data and up to 14 months for aggregated reports, after which it is deleted or anonymised. RevenueCat retains purchase records for as long as needed to provide the subscription and to meet legal record-keeping obligations.

International transfers

Google and RevenueCat operate globally and may process the technical data described above in the United States and other countries. Where required, transfers are covered by the European Commission's Standard Contractual Clauses or an equivalent mechanism, as described in those providers' terms. Your health data is not transferred by us anywhere.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to restrict or object to its processing, to withdraw consent, and to lodge a complaint with a supervisory authority (for example the Turkish Personal Data Protection Authority, KVKK, or your local data-protection authority in the EU/EEA or UK).

Because your health data is stored only on your device and in your own iCloud, the fastest way to exercise most rights is inside the app: view and edit entries, export reports, or use Settings › Delete all data. For anything relating to diagnostics or purchase records, or for any other request, write to murat.kuslu@outlook.com; we answer within 30 days. We will never discriminate against you for exercising a privacy right.

California residents. We do not "sell" or "share" personal information as defined by the CCPA/CPRA and do not use sensitive personal information for purposes other than providing the app. You may request access to or deletion of the limited technical data described above.

Children

Doza is intended for adults who manage a medication routine or track their own health. It is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has used the app and data has reached us through diagnostics, contact us and we will delete it.

Security

Health data never leaves the device unencrypted: iOS protects the app's storage with hardware-backed encryption, iCloud data is encrypted in transit and at rest by Apple, and diagnostic and purchase data are sent over TLS. No system is perfectly secure; keep your device passcode and Apple Account protected and update iOS regularly.

Changes to this policy

When we change this policy in a meaningful way, the app will ask you to review and accept the new version before you continue, and the effective date above will change. The current version is always available at https://muratkuslu.com/apps/doza/privacy/ and inside the app under Settings › About.

Contact

Murat Kuşlu · İzmir, Türkiye · murat.kuslu@outlook.com