Privacy Policy

Effective October 1, 2026

IN SHORT

Your log (doses, weight, food, how you feel) is stored on your phone.
Cloud backup is optional. It only happens if you sign in, and you can delete it any time.
We never sell your data, never share it for advertising, and have no ads or ad trackers.
You can export or delete everything from inside the app.

1. Who we are

Kindose is a medication, food and progress tracker for people on GLP-1 medicines. It is published by [Publisher legal name] ("we", "us"). For anything about your privacy, email privacy@kindose.app.

Kindose is for adults (18+). It is not a medical device and does not give medical advice.

2. What we collect and why

Stored only on your phone

Everything you enter is saved in the app's storage on your device:

Your plan: medicine, dose, schedule, treatment start date, reminder time.
About you: sex, date of birth, height, starting and goal weight, activity level, how you eat, what you want help with.
Your log: doses, injection spots and how they felt, weight, protein and water, foods you save, side effects, mood and notes, appointments, pen supply and what you spent.

We don't receive this data unless you turn on backup (below). If you type a name or birth date into the doctor report, it is used for that PDF only and never saved.

Only if you sign in (optional backup)

Account: your email address and a user ID from Google sign-in (Sign in with Apple when available). We never see your password.
Backup: a copy of the on-phone data listed above, plus the app version and phone type (iOS or Android), so you can restore it on a new phone.

If you buy Kindose Plus

Payments are handled by Apple (App Store) or Google (Google Play); we never see your card details. We receive your subscription status (plan, start, renewal or expiry date) through our subscription provider, linked to an anonymous ID or, if you are signed in, your account ID.

Notifications

Dose, doctor-visit, refill and free-week reminders are scheduled on your phone. Their text never names your medicine.

What we don't do

No advertising, no ad IDs, no selling or renting data, no data brokers.
No analytics or tracking SDKs that follow you across apps or websites.
We don't use your data to train AI models.

3. Health data

Much of what you log is health information. We use it only to show your log, progress, reminders and reports to you, and (if you sign in) to back it up. We process it because you choose to enter it and turn features on (your consent), and you can withdraw that at any time by deleting it. We don't share it with employers, insurers, advertisers or anyone else, except the service providers below that run the app for us.

4. Service providers

Provider	What for	Data
Supabase (servers in Tokyo, Japan)	Sign-in and optional backup	Email, user ID, backup copy
Google (Sign-In)	Signing in with your Google account	Email, Google user ID
RevenueCat (USA)	Managing Kindose Plus subscriptions	Subscription status, anonymous or account ID, store transaction info
Google Firebase Crashlytics (USA)	Crash reports, so we can fix bugs	Crash details, device model and OS version, app version, the screen open at the time, a random install ID. No health data, name or email.
Apple, Google	App stores and payments	Handled under their own privacy policies

They may only use your data to provide their service to us. Some are outside your country, so your data may be transferred internationally; where the law requires it, we rely on safeguards such as standard contractual clauses.

5. How long we keep it

On your phone: until you delete it in the app (Me → Delete all) or uninstall.
Backup and account: until you delete your account. Deletion removes the backup and account right away.
Subscription records: kept as long as needed for billing, tax and store rules, then deleted or anonymised.

6. Your choices and rights

Export: Me → Export my data gives you a copy of your data as spreadsheet files (CSV).
Delete: Me → Delete my account (cloud) and Me → Delete all (phone). See how to delete your account.
Ask us: to access, correct, delete or move your data, or to object or restrict use, email us. We reply within 30 days.

EU/UK: you have rights under the GDPR / UK GDPR and can complain to your data protection authority. California and other US states: you can request access and deletion; we don't sell or "share" personal information for targeted advertising. Washington (My Health My Data Act): we collect consumer health data only to provide the features you use and don't sell it; you can ask to access or delete it.

7. Security

Data is sent over encrypted connections (HTTPS). Backups are stored so that each signed-in user can only read their own. No system is perfectly secure, so please keep your phone locked.

8. Children

Kindose is not for anyone under 18. If you believe a child has given us data, email us and we will delete it.

9. Changes

If we change this policy, we update the date above and tell you in the app for important changes. For example, if we add server push notifications, we will describe them here first.

10. Contact

[Publisher legal name], [Registered address, Country]
privacy@kindose.app