Privacy Policy & Health Data Notice

This Privacy Policy and Health Data Notice explains how Redose ("Redose", "we", "us", or "our") collects, uses, stores, shares, and protects information when you use our mobile apps, website, and related services (together, the "Service"). It also serves as a consumer health data notice under laws such as the Washington My Health My Data Act and similar state laws. By using the Service, you agree to this Policy.

Plain-language summary

• Redose is a tracking, organization, and education tool for GLP-1 medications, peptides, and nutrition. It is not a medical device and does not provide medical advice, diagnosis, treatment, or dosing instructions.
• Your protocol and health entries are stored on your device first, with optional encrypted sync across your own devices.
• We do not sell your personal information or consumer health data, and we do not use it for targeted advertising.
• We do not use your personal health data to train our own AI models.
• Apple Health and Health Connect data is accessed only with your permission and is not used for advertising or sold.
• You can access, export, correct, and delete your data, and you may have additional rights depending on where you live.

This summary is for convenience only. The full Policy below controls.

1. Who we are

The Service is operated by Redose. Redose is the controller responsible for personal information processed under this Policy. You can reach us at calfiz@calfiz.com.

2. Medical disclaimer

Redose provides tracking, organization, educational, and informational features only. It is not a healthcare provider, medical device, pharmacy, telehealth service, or emergency service, and it is not a substitute for professional medical advice. Nothing in the Service, including calculators, schedules, estimates, reminders, reports, or any AI-generated content, constitutes medical advice, diagnosis, treatment, prescription, or dosing instructions. Always consult a qualified healthcare professional before making any health decision. In an emergency, contact your local emergency services.

3. Key terms

• Personal information is information that identifies, relates to, or could reasonably be linked to you.
• Health data is information about your body, medications, peptides, doses, injection sites, side effects, weight, nutrition, hydration, photos, notes, and similar information you enter or generate in the Service.
• Sensitive personal information includes health data, account credentials, and body-related photos.
• Consumer health data is health-related information protected by laws such as the Washington My Health My Data Act and comparable state laws.
• De-identified data has had personal identifiers removed so it is not reasonably linkable to you. Aggregated data combines information from many users into summary statistics.

4. Where this Policy applies

5. Information we collect

Information you provide. Protocols, medications and peptides, doses and dose history, injection sites, schedules, side effects and symptoms, weight, food and calories, macros, water, notes, and optional profile details such as height, sex, or goals. You do not need to provide your real name to use Redose.

Identifiers. To sync data across your devices and operate the Service, we use anonymous device and user identifiers, and limited technical information such as app version, device model, and operating system version.

Photos and scans. If you save progress photos, vial photos, or use a meal or food scan feature, those images are processed to provide the requested feature and stored only if you save them. Treat photos as sensitive and avoid including unnecessary identifying information.

AI features. If you use an optional AI feature (for example, a meal scan or a notes summary), the content you submit may be processed by an AI provider to generate the result. We do not use your personal health data to train our own AI models.

Health integrations. With your permission, Redose can read and write data you authorize through Apple Health (iOS) or Health Connect (Android), such as body weight, nutrition, and workouts. We only access the categories you grant, and you can revoke access in your device settings at any time.

Subscriptions. Purchases are processed by the Apple App Store and Google Play. We may receive subscription and entitlement status and purchase metadata. We never receive your full payment card details.

Usage and diagnostics. We collect limited, aggregated usage and crash information to keep the Service reliable. The website uses privacy-friendly analytics (Vercel Web Analytics) that measure page views and visits without cookies or cross-site tracking. We do not intentionally send your health entries, dose logs, or notes to analytics providers.

Support communications. If you contact us, we process what you choose to include. Please avoid sending unnecessary health information in support requests.

6. Health data notice

Redose may collect health data you choose to enter, upload, scan, import, or generate. We use it to provide core tracking and organization features, sync your data across your devices, deliver any features you request, personalize your experience, maintain security, improve reliability, respond to support, and comply with law. We do not currently sell consumer health data, share it for targeted advertising, or use personal health data to train our own AI models. If we ever materially expand how we process consumer health data, we will update this Policy and provide any consent, written authorization, or opt-out required by law before doing so.

7. How we use information

We use information to operate and secure the Service, authenticate you, sync your data, provide tracking, calculators, reminders, inventory, and nutrition features, generate dashboards and doctor-ready reports, process any features you request, manage subscriptions, respond to support, debug and improve the Service, prevent fraud and abuse, enforce our Terms of Service, and comply with legal obligations. We do not use your health or protocol data for advertising.

8. How we share information

We share information only as described here.

We may also disclose information for legal reasons (to comply with law or protect rights and safety), with your consent, or as part of a business transfer (merger, acquisition, financing, or sale of assets), subject to applicable law and this Policy. We never sell your personal information or consumer health data.

9. What we do not do

We do not sell your personal information or consumer health data, share it for cross-context behavioral advertising, use your health data for advertising or marketing, use Apple Health or Health Connect data for advertising or sale, use your personal health data to train our own AI models, store Apple Health data on our servers, provide medical advice or dosing instructions, or use geofencing to target you near health facilities. If any of this changes, we will update this Policy and provide notice, consent, or opt-out rights as required by law.

10. Apple Health & Health Connect commitments

If you connect Apple Health, Redose complies with Apple's HealthKit rules: Apple Health data will not be sold, used for advertising or marketing, used for use-based data mining, or shared except as permitted by Apple and applicable law; it is accessed only with your permission and is read locally, not stored on our servers. Health Connect data (Android) is accessed only with your permission and only for the data types relevant to features you use. These commitments override any broader future-use or business-transfer language in this Policy.

11. How and where we store data

Redose is offline-first: your entries save to your device immediately. If you enable sync, your data is sent over encrypted connections (HTTPS/TLS) to our backend so it can reach your other devices, where it is stored with encryption in transit and at rest where supported by our providers. We apply reasonable administrative, technical, and organizational safeguards, but no system can guarantee absolute security. If a breach requires notification under applicable law, we will notify affected users as required.

12. Data retention and deletion

We keep information only as long as needed for the purposes in this Policy or as required by law. When you request account deletion, active system data is deleted or deactivated within a reasonable period (generally within 30 days); backups may persist for a limited time before being overwritten; and some records may be retained for legal, security, fraud-prevention, tax, or compliance purposes. De-identified or aggregated data may be retained indefinitely. Apple Health data needs no deletion from our servers because we do not store it there.

13. Your privacy rights

Depending on where you live, you may have the right to access, correct, delete, export, or port your information; withdraw consent; opt out of sale, sharing, targeted advertising, or profiling; limit use of sensitive personal information; and appeal a denied request. In the app you can edit or delete tracking data, export your data, revoke Apple Health or Health Connect access, and manage notifications and analytics. To make a request, email calfiz@calfiz.com. We may verify your identity before responding and will respond within the time required by law.

14. US state privacy rights

California (CCPA/CPRA). California residents may have rights to know, access, delete, correct, opt out of sale or sharing, and limit use of sensitive personal information, plus non-discrimination for exercising them. In the past 12 months we may have collected identifiers, account records, commercial information (subscription status), internet/usage activity, limited inferences, and sensitive personal information (health data, credentials, photos). We do not currently sell or share personal information as defined by California law; if we begin to, we will provide a "Do Not Sell or Share My Personal Information" mechanism.

Washington (My Health My Data Act). Washington residents may confirm whether we collect, share, or sell consumer health data, access or delete it, and withdraw consent. We do not currently sell consumer health data and do not use geofencing around health facilities. Any sale would require valid written authorization, retained as the law requires.

Nevada. Nevada residents may have rights regarding the sale of covered information and consumer health data. We do not currently sell consumer health data. Submit requests to calfiz@calfiz.com with subject "Nevada Privacy Request".

Other states. Residents of Oregon, Virginia, Colorado, Connecticut, Utah, Texas, Montana, Tennessee, and other states may have additional rights. Contact calfiz@calfiz.com to exercise them.

15. International users and legal bases

Redose may be operated from, and your information processed in, the United States and other locations where our providers operate. If you are in the EEA, UK, or a similar region, we process information on these legal bases: contract (to provide the Service), consent (for optional features such as health access and notifications), legitimate interests (to secure and improve the Service), and legal obligations. Where required, we use appropriate safeguards for international transfers.

16. Cookies and tracking

The apps do not use traditional cookies. The website uses only essential cookies and privacy-friendly analytics that do not perform cross-site behavioral advertising. You can control cookies in your browser settings.

17. Age requirement

Redose is intended for users 18 years or older and is not directed to children. We do not knowingly collect personal information from anyone under 18; if we learn that we have, we will delete it as required by law.

18. Third-party links

The Service may link to third-party websites or services. This Policy does not apply to them, and we are not responsible for their practices.

19. Do Not Track and global signals

There is no uniform standard for Do Not Track, and we do not currently respond to those signals. Where required by law, we honor recognized opt-out preference signals such as Global Privacy Control for applicable web activity.

20. Changes to this Policy

We may update this Policy from time to time. We will revise the "Last updated" date above and, where material and required by law, provide notice in the app or by email. Continued use after changes take effect means you accept the updated Policy, except where additional consent is required.

21. Contact us

Redose, operator of Redose. Email: calfiz@calfiz.com.