Dosi Privacy Policy

In short

Dosi keeps your medicines, your dose times and your log on your iPhone and, if you use iCloud, in your own iCloud, encrypted on your iPhone before upload. We cannot read any of it. If you share your box with family, the people you invite see it through iCloud. For caregiver alerts, a small server of ours in Frankfurt holds random identifiers, the times of alarm doses and whether each one was marked. It never receives a name, a medicine, a strength or an amount. Dose times and marks are deleted from it after 14 days. There is no account, no analytics, no advertising and no third-party SDK. Dosi does not use Apple Health.

Dosi is a reminder and a log. It is not medical advice and not a medical device.

1. Who is responsible

Dosi is made by Burak Özaslan at 1801 Labs, Maltepe, İstanbul, Türkiye, who is the data controller for the alert server and for emails you send us. Email: support@1801labs.com. For any privacy question or request, write to that address.

We do not receive the medicines, logs and names you keep in Dosi. They stay on your devices, in your own iCloud and in the boxes you choose to share (sections 3 and 4).

2. Medication data is health data

Information about the medicines a person takes is health data: a special category of personal data under the GDPR (Art. 9) and special category personal data (özel nitelikli kişisel veri) under the Turkish data protection law (KVKK, Art. 6). Dosi is built so that this data does not reach us. The few records our alert server keeps are pseudonymous and contain no medicine or name, but because they are the times of someone's doses, we treat them as health data too: we keep as little as we can, for as short a time as we can, only on servers we run, and only with your explicit consent (section 14).

3. What Dosi stores, and where

• What: the people in your box (a name and, if you add it, who they are to you), each medicine (its name, its strength as on the label, the look you picked, the amount per dose and its unit, its times, whether it rings as an alarm, whether it is visible to family, the pack count and, for a course, its start and length), the log (taken or skipped, when, who marked it, the skip reason you chose, and marks that were removed), the name your family sees for you, and your settings.
• On your iPhone. Everything is stored on your iPhone, in storage that Dosi shares only with its own widgets.
• In your own iCloud. If you are signed in to iCloud, Dosi keeps a copy in your private iCloud database (Apple's CloudKit) so your data survives a new phone and your family can share your box. Each record's content is stored in CloudKit's encrypted fields: it is encrypted on your iPhone before it is uploaded, so neither Apple nor we can read it. Your iCloud account is run by Apple under its own privacy policy.
• Without iCloud, Dosi keeps everything on your iPhone only, and sharing a box with family is not available.

4. Sharing your box with family

You can share a box with family (with Dosi Family). Sharing uses iCloud sharing: Dosi opens Apple's sharing screen, and you send the invitation link yourself, for example in Messages. Only the people you invite can join. They need an iCloud account and Dosi, and no Dosi account. The invitation shows the box's name, for example "Ayşe's box".

The people in a shared box can see:

• the name of the person whose box it is and, if you added it, who they are to you;
• every medicine that is Visible to family: its name, strength, look, amount per dose, times, whether it rings as an alarm, and the pack count and refill state;
• the log: which doses were taken or skipped and when, who marked them, the skip reason, and marks that were removed;
• the names of the other people in the box and whether each of them takes the medicines or looks after someone.

People in a shared box can also mark a dose as taken. The double-dose guard applies to everyone: a second mark of a dose is refused and shows who marked it and when.

Private medicines. If you turn off Visible to family for a medicine, the medicine stays in your private iCloud. The shared box receives only a nameless placeholder with its times, schedule and amount per dose, so your family sees a dashed pill and "1 private med", never its name, strength or look.

Someone you look after. A person without a phone of their own, such as a child or a grandparent, has a box in your iCloud, and their doses ring on your phone. If you invite others to that box, they see it as described above. Only add someone this way if you look after them and have the right to manage this information for them.

Removing people. The owner of a box can tap Manage who's in to open Apple's sharing screen and remove someone or stop sharing. A family member can leave with Leave [name]'s box on that person's page. People who are removed no longer receive changes to that box.

5. Caregiver alerts and our alert server

Caregiver alerts tell the people who look after you when an alarm dose has not been marked by the end of its grace time (30 minutes by default), and follow up if it is marked later. They need a server: when a dose goes unmarked, the phone that would send the news may be off or out of reach, so a clock on our server decides when to send it. Your own alarms never depend on this server.

Off until you turn them on. Caregiver alerts are off by default. The box owner turns them on with Alert my family; turning it off deletes the box from our alert server. Each family member turns on Alert me to receive alerts on their own iPhone; turning it off removes that device from the box on the server.

How it works. For each dose set to Ring as alarm in the next seven days, the box owner's iPhone (yours, or the caregiver's for someone they look after) sends the server a random slot identifier, the time the dose is due and the grace time. When a dose is marked, a device in the box sends the server that slot identifier and the time it was marked. Caregivers' iPhones register their push token. If the grace time passes with no mark, the server sends each caregiver a push notification, and a follow-up if the mark arrives later. The slot identifier is computed with a key that exists only inside your shared iCloud box, so the server cannot tell which person, medicine or dose it belongs to. Doses that come as notifications are never sent to the server.

What our server stores:

• Devices: a random device identifier, a one-way hash of a random secret created when Dosi was installed (the device's sign-in), a session counter, and when it was created.
• App Attest keys: the identifiers of the keys that proved a request came from a genuine copy of Dosi (Apple's App Attest). They are kept so a key can't be reused, and are not linked to a device.
• Circles: a random circle identifier created on your iPhone (not the iCloud invitation link), which device created it, which devices belong to it, and whether each of them takes the medicines or looks after someone.
• Push tokens: the token Apple gives each caregiver's device for notifications, stored with that device.
• Alarm doses: the slot identifier, the time the dose is due, the grace time in minutes, and when an alert was sent.
• Marks: the slot identifier, the time the dose was marked and when the mark reached us.
• Notifications: the queue of notifications waiting to be sent (circle and slot identifiers, the kind of message, delivery attempts) and records of notifications delivered.

What our server never receives: anyone's name, medicine names, strengths, amounts, pill looks, skip reasons, your log, your iCloud identity, your email address, phone number, location or contacts. It doesn't store your language: your iPhone translates the notification.

What a caregiver's notification contains. The push from our server carries a generic message ("A dose isn't marked yet") and the random identifiers. The caregiver's iPhone fills in the name and time from the box it already has through iCloud, for example "Ayşe's 8:00 AM dose isn't marked yet". Medicine names never appear in caregiver alerts.

6. Alarms, notifications, widgets and the Lock Screen

• Alarms are scheduled on your iPhone with Apple's AlarmKit, a week ahead, and renewed when you open Dosi and once a day in the background. Nothing comes from a server. An alarm shows the time of day, for example "Morning dose", and the person's name for someone you look after, not medicine names.
• Notifications for doses that don't ring as an alarm (and for alarm doses while alarms are off) are also scheduled on your iPhone. By default they show only the dose and its time, for example "Morning dose · 08:00" or "2 medicines. Open Dosi to see them", never what you take. If you turn on Show medicine names in notifications in Dosi's Settings, they also show the medicine names, and can then appear on your Lock Screen; to hide their content on a locked iPhone, use iOS Settings → Notifications → Show Previews.
• Widgets and the Live Activity show pills and times only, never medicine names, plus the person's name for someone you look after.

7. Permissions

Dosi explains why it asks before each system prompt, and you can change every permission in iOS Settings.

• Alarms: so a dose rings through Silent mode and Focus, like your wake-up alarm. Dosi never rings for anything but the doses you set.
• Notifications: reminders for the doses you set and, if you look after someone, a note when their dose isn't marked yet. No marketing notifications.
• iCloud: no system prompt; Dosi checks that you are signed in before you share a box.
• Live Activities: the next dose on the Lock Screen and in the Dynamic Island.
• Background activity: to renew alarms once a day and to receive iCloud changes from your family.

Dosi does not ask for your location, contacts, camera, photos, microphone or Apple Health.

8. Apple Health

Dosi does not read from or write to Apple Health. If a future version offers it, Dosi will ask for permission first, and this policy will say exactly what it reads and why before that version is released.

9. Purchases

Dosi Family is bought through the App Store with StoreKit. Apple handles payment; we never see your payment details or your Apple Account. Dosi checks your purchase with Apple on your iPhone. If you share Dosi Family through Family Sharing, Apple manages that. Our server receives no purchase information.

10. The history PDF

If you create a PDF of the history (Dosi Family), it is made on your iPhone and handed to the system share sheet. Where you send it is your choice; we never receive or store it. It is a log kept by you in Dosi, not a medical record.

11. Who else processes data

• Apple runs iCloud (your data in your own account), delivers caregiver alerts through the Apple Push Notification service (which processes the notification and its random identifiers to do so), provides App Attest and handles purchases, each under Apple's privacy policy.
• DigitalOcean hosts our server in Frankfurt, Germany, as a virtual server that we run. The database and its backups stay on servers we run.
• Cloudflare handles DNS and the encrypted connection (TLS) for dosi.1801labs.com, so it processes your IP address and the requests in transit. It stores none of Dosi's data. Data we store lives only on servers we run; Cloudflare is DNS and proxy only.

No one else receives your data.

12. How long data is kept

• On your iPhone and in your iCloud: until you delete it (section 13).
• Alarm dose times and marks on our server: 14 days.
• Records of notifications delivered: 30 days. The send queue keeps sent items 7 days and items that could not be delivered 30 days.
• Devices, circles and push tokens: while alerts are on. When the owner turns off Alert my family or deletes the box, everything the server holds for that box is deleted right away; when a family member turns off Alert me or leaves, their device is removed.
• Backups: the server makes a daily backup of its database at 03:30 UTC. Backups stay on servers we run and are kept for 7 days, so deleted records leave them within that time.
• Technical logs (IP address, time, request) are kept briefly for security and rotated automatically.
• Emails you send us: as long as needed to answer you.

13. Your control

• Keep a medicine private: turn off Visible to family for it.
• Caregiver alerts: turn off Alert my family (owner) or Alert me (family member) at any time.
• Manage your box: as the owner, use Manage who's in to remove someone or stop sharing. As a family member, use Leave [name]'s box on that person's page.
• Delete everything: Dosi's Settings → Delete everything removes your medicines and log from iCloud first, then from your iPhone. It can't be undone.
• iCloud: you can delete Dosi's data in your iCloud in iOS Settings → your name → iCloud → Manage Storage → Dosi.
• Your iPhone: deleting the app removes what Dosi stores on it.
• Notifications and alarms: you can turn them off in iOS Settings at any time.

14. Legal bases

Dosi processes your medicines and log only on your devices and in your own iCloud, under your control; we do not receive them. For the alert server, which handles the times of alarm doses, the legal basis under the GDPR is your explicit consent, Art. 6(1)(a) and Art. 9(2)(a), which you give in Dosi before caregiver alerts start for a box. You can withdraw it at any time by stopping caregiver alerts or sharing for that box; this does not affect processing before the withdrawal. Keeping the server secure and preventing abuse is our legitimate interest, Art. 6(1)(f). Answering your emails is based on Art. 6(1)(b) or (f). Under the KVKK, we process the alert server's data with your explicit consent (açık rıza), and other data to perform our contract with you or for our legitimate interest.

15. International transfers

Our server is in Germany, in the European Union. We are based in Türkiye, so storing data there is a transfer abroad under the KVKK, to which you consent when you turn on caregiver alerts. Apple and Cloudflare may process data in other countries, including the United States, under their own safeguards, such as the EU Standard Contractual Clauses. Your iCloud data is stored by Apple; the content of your records is encrypted on your iPhone before it leaves it.

16. Security

Connections are encrypted (TLS). Only genuine copies of Dosi can register with the server (App Attest). The server stores random identifiers and times only, runs as its own isolated service with its own keys, and its database and backups are readable only by that service. Your records in iCloud are protected by CloudKit's encrypted fields. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

17. Your rights

Depending on where you live, including under the GDPR (EU and UK), the KVKK and US state privacy and consumer health data laws, you have the right to access, correct, delete and receive a copy of your personal data, to object to or restrict processing, to withdraw consent at any time, and to complain to a data protection authority. Most of your data is under your control in the app and in iCloud (section 13). For anything else, write to support@1801labs.com; we answer within one month. Please don't send us details of your medicines. We never sell or share personal data, use it for advertising or tracking across apps and websites, or make automated decisions about you.

18. Children

Dosi is made for adults who manage their own medicines or look after someone else's. A parent or guardian may add a child as someone they look after; the child's information then stays on the parent's devices, in the parent's iCloud and in the boxes the parent chooses to share. We do not knowingly collect data from children. If you think a child has sent us personal data by email, write to us and we will delete it.

19. Emails you send us

If you write to support@1801labs.com, we receive your email address and what you write, and use them only to answer you. Our email is hosted by Apple (iCloud Mail). We keep emails as long as needed to help you, and delete them on request.

20. This website

1801labs.com, where this policy lives, sets no cookies, runs no analytics and loads nothing from third parties. It is served by Cloudflare, which processes your IP address and technical request data to deliver the page and protect it from abuse.

21. Changes to this policy

If this policy changes, we will update this page and the date above. If a change is significant, we will also tell you in the app before it applies.

22. Contact

Burak Özaslan, 1801 Labs, Maltepe, İstanbul, Türkiye. support@1801labs.com.