Privacy Policy

Last updated: 27 August 2026

This Privacy Policy explains how SyntaxLabs Ltd ("we", "us", "our") collects, uses, and protects your information when you use the Dosora mobile app (the "App"). We are the data controller for the purposes of UK and EU data protection law.

Dosora is a reminder and organisation tool, not a medical device, and does not provide medical advice. Always follow the guidance of a qualified healthcare professional regarding medication. Dosora does not diagnose, treat, or make clinical decisions.

1. Who this policy is for

Dosora is intended for adults (18 or over). It is not directed at children, and we do not knowingly collect data from anyone under 18. A "care circle" links a person taking medication with a family member or caregiver; both are users of the App and this policy applies to both.

2. Information we collect

We collect only what the App needs to work.

CategoryWhat it isWhy we need it
AccountEmail address and a password (stored only in encrypted/hashed form).To create your account and let you sign in across devices.
Medication detailsMedication names, doses, schedules (times/days), and any photo you add of a medication.To show reminders and let a caregiver see what is being taken.
Adherence recordsWhether a dose was marked taken, skipped, or missed, and when.To provide history and the caregiver missed-dose alert.
Care circleThe circle name, member roles, an optional patient phone number, and the device timezone.To link a caregiver and a patient and time alerts correctly.
NotificationsA push notification token for your device.To deliver reminders and caregiver alerts.
SubscriptionYour Dosora Pro subscription status (managed by RevenueCat and the app stores). We do not receive or store your card or bank details.To unlock and manage paid features.
TechnicalBasic device and platform information and app diagnostics.To keep the App working and secure.

Some of this information (medication names and adherence) may reveal details about health. We treat it as sensitive and store the minimum needed.

3. How we use your information

We do not sell your personal information, and we do not use it for advertising.

4. Legal bases (UK/EU GDPR)

We rely on: performance of a contract (to provide the App you asked for); your consent (for notifications and for any health-related information you choose to enter, which you can withdraw at any time); and our legitimate interests (to keep the service secure and working). Where the information relates to health, we process it only with your explicit consent, given by choosing to enter it.

5. Who we share it with

We share information only with service providers that help us run the App, under contracts that require them to protect it. They act as our processors and only handle your data on our instructions:

We may also disclose information if required by law, or to protect the rights, safety, or security of our users or the public.

6. International transfers

Some of our providers may process data outside the UK/EEA. Where they do, we rely on appropriate safeguards (such as the UK International Data Transfer Agreement or EU Standard Contractual Clauses) to protect your information.

7. How long we keep it

We keep your information for as long as your account is active. If you delete your account, we delete your personal data from our systems within 30 days, except where we must keep limited records to comply with the law. Backups are cycled out on a rolling basis.

8. Security

Data is encrypted in transit. Access to each care circle's data is restricted by row-level security so only members of that circle can see it, and medication photos are held in a private store accessible only to circle members. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your information.

9. Your rights

Under UK/EU data protection law you have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent at any time.

10. Changes to this policy

We may update this policy from time to time. If we make significant changes, we will update the date above and, where appropriate, notify you in the App.

11. Contact us

SyntaxLabs Ltd
Email: privacy@dosora.app