Version: v1.3Effective Date: October 19, 2026Company: Viking Media Labs Inc., a Canadian corporation operating Doserly
Required account functions
Recipient
Supabase
- Data and purpose
- Email/authentication, account and health records, server functions, security and US-based storage.
Recipient
PowerSync
- Data and purpose
- Account-linked health records and sync metadata for US-based multi-device synchronization.
Recipient
OneSignal and Resend
- Data and purpose
- Device token or email, message content and delivery information for enabled reminders and transactional communications. Generic dose lock-screen previews are the default; some other alerts can include names or labels.
Recipient
Adapty and Apple/Google stores
- Data and purpose
- Purchase receipts, status, entitlements and store billing.
Recipient
Sentry
- Data and purpose
- Crash, diagnostic and performance data, with sensitive-content controls.
Optional and feature-driven flows
Recipient
Supabase and PowerSync
- Data and choice
- Selected Apple Health or Health Connect steps, heart-rate, sleep and paired blood-pressure readings, source/coverage data and personal trends. The primary adult self-profile owner selects types and separately opts into Doserly account sync before OS permission. Data can leave an offline queue later.
Recipient
PostHog
- Data and choice
- Usage analytics only after the optional analytics choice. Masked replay recordings made by earlier app versions, for people who turned replay on, remain under PostHog's retention settings; the current app does not record sessions.
Recipient
FatSecret or Open Food Facts
- Data and choice
- A lookup term, barcode or product identifier when you use a product lookup.
Recipient
OpenAI
- Data and choice
- User-approved, de-identified but still personal health-summary requests for AI reports and curated guide/citation retrieval. Current requests use private aliases, relative day tokens, generic custom-item labels, no notes/free text, library canonical retrieval terms, and one random submission token. The health facts may still identify someone by context.
Recipient
Your chosen destination
- Data and choice
- Data you direct Doserly to export or share.
Wearable summaries are excluded from current OpenAI requests while the option is disabled. If separately enabled and selected for one report, the transfer may include personal current/prior 28-day averages, observed-day counts, coverage, source labels, and possible dose/outcome associations with dates and uncertainty. It excludes raw samples, sample timestamps, and health-store record IDs. The report permission is separate from wearable import and account sync.
The current OpenAI Responses request runs in background mode without store: false. Standard response application state is retained for at least 30 days by default; separate abuse logs can be kept up to 30 days by default, with legal or safety exceptions. API data is not used to train general OpenAI models by default unless the customer opts in; Doserly has not opted in for user reports. Deleting a Doserly report cannot immediately erase an already submitted provider request. Actual hosted project settings remain to be verified.
On-device work and other disclosures
Text recognition, biometric authentication, and local key handling run on device; content you choose to save may sync afterward. We may disclose information to authorities where law requires. We do not sell consumer health data, send it to data brokers, or use it for targeted advertising.
Account-linked trends and report summaries remain personal health data. We do not use individual health records to produce population-level health insights or retain them after account deletion under a population-output exception.
For recipient identities, access, deletion, withdrawal, or appeal requests, contact privacy@doserly.com. Mail: Viking Media Labs Inc., 72 Victoria St S, Kitchener, ON N2G 4Y9, Canada.