Last updated: July 28, 2026
DoseForge is built privacy-first, on both iOS and Android. Your health records — protocols, doses, vitals, photos, labs and notes — live on your device. We don’t require an account, we don’t build a profile of you, and we never sell your data. A small number of optional features (AI analysis, buying credits, household sharing, and connecting a glucose monitor) use our cloud services, and we’ve engineered each one to process as little as possible. This policy explains exactly what happens.
The protocols, doses, injection sites, body-composition and circumference measurements, progress photos, symptoms, labs/documents and notes you enter are stored locally using the operating system’s on-device storage. Documents you save are encrypted at rest on the device. None of this is sent to us unless you use one of the optional features below.
If you enable sync, your data is synchronized across your own devices through your personal cloud account — Apple iCloud (CloudKit) on iOS, or your Google account on Android. This data is governed by that provider’s privacy terms; it is your cloud, and DoseForge cannot read it.
Apple Health / Health Connect. If you connect a platform health service, DoseForge reads only the metrics you explicitly authorize (such as weight, body composition, heart rate, HRV, sleep, glucose and nutrition) to display your trends. This data stays on your device except through your own private cloud sync.
Continuous glucose (Dexcom). If you choose to connect Dexcom, you authorize the connection through Dexcom’s own secure login. DoseForge never sees your Dexcom password. The access tokens that let us retrieve your glucose values are exchanged and stored on our secure backend, tied only to your random device identifier, and are used solely to show your glucose alongside your doses and to power your personal insights. We do not sell or share this data. You can disconnect at any time, which revokes our access.
AI analysis. When you run an AI analysis, the app sends only the specific text needed for that analysis (for example, de-identified numbers and labels you’ve logged) to our processing service. We don’t send your name, your photos, or direct identifiers. Results may be briefly cached so repeat requests are faster and cheaper. Document and label scanning is performed on your device; only the resulting text — not the image — is ever transmitted.
Credits & payments. AI features use credits. Payments are processed on the web by Square, a PCI-DSS Level 1 certified processor; DoseForge never sees or stores your card number. We keep a minimal credit balance and ledger tied to your random device identifier — no name or email required to use the app.
Household sharing. If you share inventory with a household, it rides a zero-knowledge, end-to-end-encrypted relay: our servers store only ciphertext and public keys and can’t read the contents. Members are exchanged keys directly, device-to-device. See our Information Security page for detail.
Support & feature requests. If you submit a support ticket or feature request, we receive what you choose to send us so we can respond and improve the app.
The app periodically downloads an updated reference catalog (peptides.json) from our website. This is
a one-way download of public reference content and contains none of your personal data.
Some reference entries include affiliate links to third-party vendors. If you tap one and make a purchase, we may earn a commission at no additional cost to you. Tapping a link opens your browser; those vendors have their own privacy practices.
We do not sell or rent your data, we serve no advertising, and we embed no third-party advertising or tracking SDKs. We do not build cross-app profiles or fingerprint your device.
DoseForge is intended for adults and is not directed to children under 13 (or the age of digital consent in your region). We do not knowingly collect data from children.
Because your records live on your device, you control them: edit or delete any entry, erase all data from within the app, or simply uninstall. You can disconnect a health service or Dexcom at any time, and you can stop sharing or leave a household. To request deletion of anything held on our backend (such as Dexcom tokens or a credit ledger tied to your device identifier), see our Record Retention Policy or contact us. Depending on where you live, you may have additional rights (access, correction, deletion, portability); we honor these.
Our cloud services run on Amazon Web Services in the United States. By using the optional cloud features you understand that the limited data they process is handled there.
We’ll update this page when our practices change and revise the “last updated” date above.
Questions about privacy, or a request about your data? Email hello@doseforge.app.
Related: Notice of Privacy Practices · Information Security · Record Retention Policy · Terms of Use