Privacy
Dosi AI: GLP-1 Tracker — Privacy Policy
What this app collects, why it collects it, and what you can ask us to delete.
Effective 5 September 2026 · applies to the iOS, Android and web versions of Dosi AI: GLP-1 Tracker (“Dosi”, “the app”).
Dosi is a personal treatment journal for adults who use a GLP-1 medicine prescribed by a clinician. It is built so that your health records stay on your device. This policy explains exactly which information the app handles, what leaves your device, when, and why.
1. No account, no cloud copy
Dosi has no sign-up and no login. Everything you record — medications, prescribed doses, dose events and injection sites, missed doses, weight entries, side effects with severity and timing, and your notes — is stored in a local database on your device. We do not sync it to our servers, and we cannot see it.
2. What leaves your device, and only with your consent: AI summaries
The only time your health records leave your device is when you ask Dosi for an AI summary (weekly or monthly recap, pattern description or questions for your clinician) and you have agreed on the dedicated consent screen. Nothing is sent before you tap “I agree, send my entries”.
What is sent: The medication name and form, dose values and dates, missed doses, weight entries, side-effect entries and any notes you attached, for the period you chose. No name, e-mail, phone number, account or advertising identifier is included.
Who receives it: Our own backend at dosi-ai.gowalk.com, which forwards the entries to the AI provider OpenRouter. OpenRouter is instructed to route the request only to model providers that do not retain or train on the data (zero data retention). Requests that no eligible provider can serve fail rather than fall back to a retaining provider.
What is kept: Our backend does not store the entries or the summary. It keeps only: a random install identifier and the public half of a key pair generated on your device (used to sign requests), usage counters for the free monthly summaries and daily limits, the result of subscription verification (see section 4) and, if you report a summary from inside the app, the text of that reported summary so we can review it.
How the summary is limited: Summaries describe what you logged. The service never diagnoses, never suggests or calculates a dose and never predicts an outcome; every summary carries a not-medical-advice footer and a “Report this summary” control.
Withdrawing consent: Settings › AI summaries lets you withdraw consent at any time. Withdrawing stops any further sending; summaries already produced stay on your device until you delete them.
3. Diagnostics and analytics
The app uses Firebase Analytics and Firebase Crashlytics (Google) to count feature use and to fix crashes. Only a fixed allow-list of event names with enumerated parameters is sent — never medication names, doses, weights, side effects, notes or free text. Crash reports contain device model, operating-system version, app version and the technical state of the app at the crash. Firebase App Check and an anonymous Firebase sign-in are used solely to prove to our backend that a request comes from a genuine copy of the app; they do not identify you.
4. Purchases
Dosi Plus is sold only through the App Store or Google Play. The app never sees your payment details. When you subscribe or restore, the app receives a purchase reference from the store and sends it to our backend so that AI summaries can be unlocked for your install; our backend verifies it with Apple or Google and keeps the verification result and the purchase reference, nothing more.
5. Reminders and permissions
Reminders are local notifications scheduled on your device. Dosi asks for notification permission only for that purpose and works without it. The app requests no other permissions, uses no location, contacts, camera, microphone or health-platform access, and contains no advertising.
6. Export and deletion
You can export your complete record as CSV or JSON at any time, share a plain-text summary, and (with Dosi Plus) produce a PDF report. Settings › Delete all my data erases every local record and forgets the install identifier and key pair; after that, the usage counters on our backend can no longer be linked to you. To ask us to delete the backend records tied to an install identifier, contact us through the support page linked from the app’s store listing.
7. Children
Dosi is intended for adults (18+) using a medicine prescribed by a clinician. It is not directed at children and we do not knowingly collect information from them.
8. Not medical advice
Dosi is not a medical device. It does not diagnose, treat, cure or prevent any condition and does not calculate, recommend or change doses. Always follow your clinician and the medication guide that came with your medicine.
9. Changes and contact
This page always shows the current version of the policy; material changes are dated here. Questions and requests: use the developer contact on the app’s store listing or the support page.