Notice of Privacy Practices

Last updated: July 28, 2026

This notice describes how health information about you may be used and disclosed, and how you can get access to this information. Please review it carefully.

About this notice

DoseForge is a personal wellness and tracking tool, not a healthcare provider, health plan, or clearinghouse. In most cases we are not a “covered entity” under the U.S. Health Insurance Portability and Accountability Act (HIPAA), and the health information you enter is generally not “protected health information” in the HIPAA sense. We nonetheless provide this notice voluntarily, in the spirit of HIPAA’s transparency, because your health data deserves clear treatment regardless of how the law classifies it.

The information we’re talking about

“Health information” here means the protocols, doses, vitals, measurements, photos, labs, symptoms, glucose and notes you choose to record in DoseForge, plus any metrics you authorize us to read from a connected service such as Apple Health, Health Connect, or Dexcom.

How your health information is used and disclosed

To provide the app to you. Your information is stored on your device and used to display your data, trends, reminders and insights.
Only with your direction. Information leaves your device only when you use an optional cloud feature — running an AI analysis (de-identified text only), syncing through your own cloud account, sharing inventory with a household (end-to-end encrypted, unreadable by us), or connecting Dexcom.
We do not sell it. We never sell or rent your health information, and we do not use it for advertising.
We do not disclose it to third parties except the service providers strictly necessary to run a feature you chose (for example, our cloud infrastructure or a payment processor), each bound to protect it, or where required by law.

Uses that require your explicit permission

Connecting a health service or Dexcom, enabling cloud sync, sharing with a household, and running an AI analysis each require an affirmative action by you. You can withdraw permission at any time by disconnecting the service, turning off sync, leaving the household, or ceasing to use the feature.

Your rights

Access & portability: your records are on your device and available to you at any time; you can export them.
Amendment: you can edit or correct any entry yourself.
Deletion: you can delete any entry, erase all data in the app, or uninstall. For anything on our backend, you can disconnect it in the app or request deletion — see our Record Retention Policy.
Restriction: you control which optional features are on, and therefore what (if anything) ever leaves your device.
Complaints: you may contact us with any concern, and you will not be penalized for raising one.

How we protect it

On-device encryption, TLS in transit, a zero-knowledge architecture for household sharing, and certified infrastructure underpin everything. See our Information Security page.

Changes to this notice

We may revise this notice; the current version always lives at this address with the “last updated” date above.

Contact & complaints

To exercise a right, ask a question, or file a complaint, email hello@doseforge.app. If you believe a health-data right has been violated, you may also have recourse with your local data-protection authority.

This notice is provided for transparency and is not a legal determination of HIPAA status or legal advice.