This notice is for people in the United States. It explains how The Crafted Code Ltd ("we"), which makes Dosia, handles consumer health data under Washington's My Health My Data Act, Nevada's SB 370, Connecticut's data privacy law and similar state laws. Our full Privacy Policy applies too. Where this notice gives you more rights, this notice wins.
1. The consumer health data we collect
- Medicines and treatment: names, strengths, doses, schedules, food rules, start and end dates, stock levels, and prescription text you scan.
- Dose history: whether each dose was taken, skipped, late or not marked, and as-needed doses with the reason and how strong it was.
- How you feel: check-ins, symptoms and their strength, daily ratings, notes, and measurements such as blood pressure or glucose.
- Appointments: doctors' names and specialities, visit dates, and notes before and after.
- Care profiles: the same information about people you look after, and who can see it.
- Inferences: Insights summaries and patterns Dosia shows you, built from the information above.
We don't collect precise location, biometric data, or data about reproductive or sexual health services, and we don't use geofencing.
2. Why we collect it, and how we use it
Only to provide Dosia to you: to store your records, send your reminders, show your history and Insights, make reports you ask for, run the AI features you agree to, and keep the service working and secure. We never use it for advertising or marketing, and we never sell it.
3. Where it comes from
From you, from people you invite to a care profile, from prescriptions you scan, and from calendar events you choose to add.
4. Who receives it
- Our processors, who handle it only on our instructions and under contract: our database host, our AI service provider (only if you turn AI features on), and the reminder services of Apple and Google. They're listed in section 7 of the Privacy Policy. None of them may use your data for their own purposes.
- People you choose: members of a care profile you create or join, and anyone you send a report to.
- Authorities, only if the law requires it.
We don't share consumer health data with any other third party or affiliate. We never sell it.
5. Your consent
We ask for your consent before we collect your health information, on a separate screen when you set up Dosia, and again before any AI feature uses it. You can withdraw either consent at any time: turn AI features off in Profile → Your data, or delete your account to withdraw consent for everything.
6. Your rights
You can:
- confirm whether we hold your consumer health data, and get a copy of it (Profile → Your data → Export does this immediately);
- get a list of every third party and affiliate we've shared it with, and how to contact them;
- withdraw your consent;
- have it deleted (Profile → Your data → Delete). We also tell our processors to delete it.
To use a right, or if you'd rather ask us, email hello@thecraftedcode.com with "Health data" in the subject, from the address on your account. We'll confirm it's you and reply within 45 days. If we need more time, we'll tell you why, and we'll never need more than 45 more days. These requests are free.
Appeals. If we turn down your request, you can appeal by replying to our answer with "Appeal" in the subject. We'll decide within 45 days and explain our decision. If you're still unhappy, you can contact your state Attorney General: in Washington, at atg.wa.gov/file-complaint.
7. Contact
The Crafted Code Ltd, company number 14639993, registered in England and Wales. Email hello@thecraftedcode.com.