Consumer Health Data Privacy Policy

Consumer health information we handle

DoseTide LLC processes the health information you choose to record: treatment or protocol descriptions, schedules, reminders, routes, quantities, completion/correction history, inventory linked to your routines, symptoms, measurements, sites and notes. Account and device identifiers can associate these records with you. Partner permissions and delegated actions can reveal a relationship to another person's health information. Records about hormone, fertility or other sensitive routines can themselves reveal sensitive health characteristics.

Sources

The information comes from you, your use of DoseTide and a partner whom you authorize to view or record information within specified permissions. The service generates scheduling, completion, sharing and synchronization records from those inputs. The release does not advertise Apple Health or Android Health Connect integration. Any later integration requires a new review of sources, categories and consent.

Purposes

We use this information to provide the record-keeping, scheduling, reminders, inventory, history, export and collaboration features you request and to protect their operation. We do not use it to recommend treatment or doses, sell it, or use it for targeted advertisements. Where consent is required for a purpose, that consent must be obtained through the appropriate interface; merely having an account does not authorize every potential health-data use.

Health information we share and recipients

Your authorized partner can receive only the information and actions allowed by your sharing selections. Backend and hosting providers may process health information to store, synchronize or transmit it on our behalf. Supabase processes account records, health records and stored files for these functions. Vercel processes information sent to our website and server endpoints. Billing providers receive subscription identifiers and status; this notice does not authorize transmission of treatment records to them. Diagnostic reporting is designed to exclude health-record text.

Other disclosures must be supported by applicable law and the purpose described to you. We do not sell consumer health data. If a legally defined sharing activity requires separate consent, it must be obtained before that activity begins. No affiliate recipient is asserted without verifying whether one exists and whether it receives this information.

Your rights and choices

Use Account → Household to change or revoke sharing permissions. Use Account → Privacy and export to obtain a copy or request account deletion. You can also contact the published privacy channel to request confirmation/access, withdrawal of consent, deletion or an appeal, including information about recipients as required by applicable law.

We will verify a request proportionately, communicate our decision and explain the applicable appeal route. Where a request must be passed to processors or other recipients, we will handle that under the applicable requirements. Revoking future access cannot undo a disclosure already seen or independently saved by another person.

For questions or appeals, email larkinjoshuad@gmail.com. If an appeal is denied, the response will identify any applicable complaint route, including the relevant state authority where required.

Where Washington's My Health My Data Act applies, requests are handled without undue delay and within 45 days of receipt. If reasonably necessary, one further 45-day extension may apply, with notice and reasons during the initial period. Authentication does not restart that deadline. You may appeal a refusal through the same email channel; we will explain the appeal decision in writing within 45 days of receiving it and provide an Attorney General complaint route if denied. Washington rights requirements.