Privacy Policy

1. Introduction

Viking Tech ("we", "our", or "us") operates DoseKit (the "App"). This Privacy Policy explains what we collect, why, and how you stay in control. DoseKit records health-related information you choose to enter; we treat all of it as sensitive.

2. Information We Collect

• Account information: your email address and name when you create an account, or the identifier Apple or Google provides when you sign in with them.
• Tracking data you enter: compounds, vials, protocols, dose logs (time, amount, injection site, notes, side effects), weight entries and journal notes.
• Meals you log: the name, calories, protein, carbohydrate and fat of each meal, and the time you ate it.
• Meal photos and descriptions: when you scan a meal, the photo or the text you typed is sent to our food analysis service to estimate its nutrition. See section 5.
• Settings: units, reminder preferences, daily nutrition targets and appearance.
• Subscription status: we use RevenueCat to manage subscriptions and store whether your subscription is active. We never see your payment details.
• Usage analytics: which screens are used and which features are tapped, collected through PostHog, so we can see what to improve. Analytics events never contain the names of your compounds, your doses or your notes.
• Approximate location: country and region derived from your connection at sign-up, used for regional settings and aggregate statistics.

3. Where Your Data Lives

Everything you log is stored on your device first, in a database only DoseKit can read. When you are signed in and online, the App syncs those records to our servers so they are backed up and available on your other devices. Sync is required for backup and multi-device use; the App keeps working offline.

4. How We Use Information

• To provide the App: schedules, reminders, calculations, history and reports.
• To back up and sync your data across your devices.
• To operate subscriptions and respond to support requests.
• To understand aggregate usage and fix problems.

We do not sell your data, show advertising, or share your tracking data with anyone for marketing.

5. Service Providers

We rely on a small number of processors to run the App: a hosted database provider for storage, Cloudflare for meal photo storage and delivery, RevenueCat for subscriptions, PostHog for analytics, Resend for transactional email, and Apple or Google for sign-in when you choose them. Each receives only what it needs to perform its function.

Meal scanning is provided by Bite Beast, a food analysis service operated by Viking Tech, which uses an AI model hosted on Amazon Web Services. When you scan a meal, the photo or description is sent to Bite Beast together with an account identifier, not your name or email. Bite Beast stores the photo, the estimate and any corrections you make, and uses them to improve the accuracy of its estimates. Meal photos are never taken from your library without you choosing one, and never contain your compounds, doses or notes. Entering a meal manually sends nothing to Bite Beast. You can turn meal tracking off in Settings.

When you save a meal you scanned from a photo, DoseKit also keeps the original photo in its own storage (Cloudflare R2) so the meal can show its picture on your devices. It is stored under your account identifier, is not used for advertising, and is deleted when you clear your data or delete your account.

6. Reminders and Notifications

Dose reminders are scheduled on your device from your own protocol and contain the compound names you entered. You can disable them at any time in Settings or in your device settings.

7. Data Retention and Deletion

Your data is kept while your account exists. You can export everything as a report or CSV, clear all tracking data while keeping your account, or delete your account entirely from Settings. Account deletion removes your data from our servers immediately and from backups within 30 days.

8. Your Rights

Depending on where you live you may have rights to access, correct, export, restrict or delete your personal information. The App provides export, clear and delete directly. To exercise any other right, contact us at support@dosekit.app.

9. Children

DoseKit is for adults. We do not knowingly collect information from anyone under 18.

10. Security

Data in transit is encrypted with TLS. Sign-in tokens are stored in the device's secure keychain. No method of storage is perfectly secure, and we cannot guarantee absolute security.

11. Changes

We will post any changes to this policy in the App and update the date above.

12. Contact

Questions about this policy: support@dosekit.app.