Privacy Policy
Effective & Last Updated: August 2026
Summary in Plain Terms
- ✓ Your Health Data Stays on Your Device: Prescription logs, dose timestamps, protein counts, and body weight are stored in an encrypted database exclusively on your iPhone. There is no central cloud health database.
- ✓ AI Meal Photo Scanning: If you use the optional photo scanner, only the food image is transmitted ephemerally to our AI processing pipeline (Google Gemini and OpenAI). It is processed in memory to estimate protein and calories, and immediately deleted. Images are never used for AI training, and your prescription/medical records are never sent.
- ✓ No Ads or Data Brokers: We do not sell, monetize, or share your data with advertisers or data aggregators.
1. Who We Are
Dose & Fuel ("the app", "we", "us") is an iOS wellness tracking application designed to help individuals on GLP-1 therapies organize their prescribed doses and daily protein intake. Dose & Fuel is not a healthcare provider and does not provide medical diagnosis, treatment, or prescription management. You can contact us regarding privacy inquiries at privacy@doseandfuel.com.
2. What Data Stays Exclusively on Your Device
All primary health, medication, and lifestyle entries created in Dose & Fuel are stored strictly locally on your iPhone in an encrypted SQLite database:
- Medication Logs: User-entered medication names (e.g. semaglutide, tirzepatide), dose strengths (e.g. 0.5 mg, 5 mg), injection dates, times, and anatomical injection sites.
- Nutrition Records: Daily protein totals, confirmed meal names, and calorie estimates.
- Body Metrics: Weight check-ins and optional body measurements.
- Personal Notes & Questions: Discussion items prepared for healthcare check-ins.
This data is protected by iOS hardware-level Data Protection keys. We do not have access to your local database and cannot read, decrypt, or restore your records if lost.
3. AI Meal Photo Scanning & External Processors
Dose & Fuel offers an optional visual meal estimation feature. When you choose to photograph a meal and submit it for an AI estimate:
A. Ephemeral Image Processing
Your food photo is uploaded securely via encrypted HTTPS (TLS 1.3) to our private cloud infrastructure (hosted in the European Union / Frankfurt). The image is passed to AI vision models via server-side APIs solely to detect visible ingredients and estimate macronutrient ranges. Once the parsing response is generated, the temporary image file is deleted from cloud storage.
B. AI Infrastructure & Subprocessors
To ensure reliability, low latency, and safety, we utilize the following enterprise API providers:
- Google Cloud / Gemini Vision (via OpenRouter): Primary multimodal computer vision model for ingredient decomposition and portion heuristics.
- OpenAI (GPT-5 / Vision Models & Moderation): Secondary fallback vision processor and automated content safety screening (via OpenAI Moderation API to screen for non-food / unsafe content).
C. Zero Model Training & Strict Data Isolation
- Zero AI Model Training: Our enterprise API contracts enforce
store: false. Your food photos are never used to train or fine-tune artificial intelligence models operated by Google, OpenAI, or any third party. - No Medical Data Transmitted: Only the visual food image and minimal estimation prompt are sent. Your user identity, medication logs, injection schedules, weight history, and clinical notes are never attached to AI requests.
- Human-in-the-Loop Confirmation: AI output provides suggested protein brackets (Realistic vs. Conservative). The app requires you to review, adjust, or confirm the estimate before it is saved to your local on-device database.
4. In-App Purchases and Billing
In-app purchases (such as consumable Scan Packs) are processed directly by Apple via the App Store and StoreKit. We do not receive, process, or store your credit card or financial billing information.
We utilize RevenueCat to validate App Store purchase receipts and maintain consumable credit balances. RevenueCat receives an anonymous app user identifier and receipt verification tokens. No medical, nutritional, or prescription data is shared with RevenueCat.
5. No Advertising, Tracking, or Data Brokers
Dose & Fuel does not include third-party advertising SDKs (such as Meta Pixel, Google AdMob, or TikTok SDK). We do not collect Apple's Identifier for Advertisers (IDFA) and do not sell, license, or monetize your personal or health data with data brokers or marketing aggregators.
6. Data Retention, Export, and Deletion Rights
In accordance with Apple App Store Review Guidelines (Guideline 5.1.1(v)), GDPR (Articles 15–21), and CCPA/CPRA:
- Data Export: You can export a complete, machine-readable JSON copy of your entire on-device history at any time from within the app settings.
- Local Data Erasure: You can permanently wipe all local database records with a single tap in Settings → Privacy & Data → Delete All Data.
- Account Deletion: If you registered an account for cross-device credit management, you can initiate complete account deletion in the app. Deletion permanently removes your cloud user identifier, revokes Sign in with Apple tokens, and purges all associated server metadata within seconds.
7. Children's Privacy
Dose & Fuel is intended for adults managing medical weight loss or wellness under clinical supervision and is not directed to children under 17 years of age. We do not knowingly collect information from minors.
8. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any material changes will be reflected on this page with an updated revision date.
9. Contact Us
If you have any questions or requests regarding your privacy rights, please reach out to us directly:
Email: privacy@doseandfuel.com
Support: support@doseandfuel.com