Privacy policy

What information dose collects when you use the platform, why we collect it, who else sees it, and the choices you have.

Effective date [to be confirmed]

Last updated 3 September 2026

The short version. You give dose health and identity information so that a licensed clinician can decide whether prescription treatment is appropriate for you. We use it to provide that care, to run the service, and to meet legal obligations. We share it with the clinicians and the pharmacy involved in your care, and with the vendors that operate the platform on our behalf.

This summary is not the notice. Where the two differ, the numbered sections govern. Whether dose sells personal information or uses it for targeted advertising is unresolved, and it is stated in section 06 rather than summarised here.

Who this notice applies to

This notice covers the dose platform and the website you are reading. It does not, on its own, cover everyone who holds information about your care.

Three parties can hold information about you, and they are not the same.

[Registered entity name], operating as dose — the technology platform. It runs the website, your account, the assessment intake and billing.
The licensed prescriber or medical group — the clinician who reviews your assessment and decides whether prescription treatment is clinically appropriate, if it is. [Whether the clinicians practise through an affiliated professional entity, and the name of that entity, is to be confirmed.]
The dispensing pharmacy — [pharmacy name to be confirmed], which dispenses and ships any medication prescribed.

Each may keep its own records under its own obligations. Where a clinician or a pharmacy holds your records as a health care provider, that provider’s own privacy notice governs those records, not this one.

What we collect

Some of this you give us. Some of it is recorded automatically as you use the site.

Account details — your name, email address, [phone number], date of birth and [state of residence].
Assessment answers — the health information you enter in the intake, including height and weight, medical history, current medications, allergies and any prior treatment. [Whether photographs or laboratory results are collected is to be confirmed.]
Care records — messages with your care team, clinician notes, prescriptions written and treatment plans, where dose holds them on a provider’s behalf.
Payment information — [payment processor to be confirmed] handles your card details. dose receives a token and the transaction record, not the card number.
Device and usage information — IP address, browser and device type, pages viewed and actions taken. Section 07 covers how.
What you write to us — anything you send by email or through the platform, including support requests.

Health information

Most of what you tell dose during an assessment is health information about you, and some of it counts as sensitive information under US state privacy laws.

Two things follow. First, your assessment answers are not used to decide what to advertise to you, and not used for any purpose unrelated to your care, the operation of the service, or a legal obligation. [Confirm against the platform’s actual data flows before this sentence is published.]

Second, whether any part of dose is a HIPAA covered entity or a business associate changes which rules apply to these records, and that is unresolved. [To be determined by counsel.] If it is, a separate Notice of Privacy Practices is required by law and this page does not replace it.

How we use information

Care — so a licensed clinician can review your assessment and provide prescription treatment, if clinically appropriate.
The service — to run your account, take payment, and send you messages about your care.
Support — to answer you when you get in touch.
Safety and security — to prevent fraud, protect accounts, and diagnose faults.
Obligations — to meet legal, clinical, pharmacy and record-keeping requirements.
Improving the service — [whether identifiable information is used for product analytics, or only de-identified information, is to be confirmed].
Marketing, only with your permission — and you can withdraw it at any time. Section 10 explains how.

When we share information

Your care team — the licensed prescriber or medical group reviewing your assessment.
The dispensing pharmacy — [pharmacy name to be confirmed], where a prescription has been written.
Laboratories — [if laboratory work is part of the pathway; to be confirmed].
Service providers — hosting, payments, email, support, analytics and identity verification vendors, under contract and only for the purpose we give them. [Vendor list to be confirmed.]
Law and safety — where the law requires it, or to protect someone from serious harm.
A change in ownership — if dose is sold or merged, information may transfer as part of that transaction.

We do not name you in marketing, publish anything about your treatment, or hand your assessment answers to an employer, an insurer or a family member without your instruction.

Counsel to draft

Selling and targeted advertising

US state privacy laws give this section specific meaning. “Sale” and “targeted advertising” are defined terms, and passing information to an advertising platform can count as both even when no money changes hands.

Whether dose sells personal information, shares it for cross-context behavioural advertising, or processes sensitive information for either purpose is unresolved. It depends on which advertising and analytics tools the published site actually loads.

[To be drafted by counsel against the site’s real tag inventory, and then stated plainly. Until that is done, no claim in either direction belongs on this page.]

Cookies and similar technologies

The site uses cookies and similar technologies to keep you signed in, remember where you are in an assessment, and measure how the site is used. Strictly necessary cookies cannot be switched off without breaking the platform.

[The full cookie inventory is to be confirmed, and no consent mechanism is installed on the site yet. Where consent is required by law, it has to be in place before launch.]

Your browser can block or delete cookies at any time. Parts of the platform may stop working if you do.

How long we keep information

Medical records have retention periods set by state law and by the professional obligations of the clinician or pharmacy holding them. Those periods are usually measured in years. [Applicable periods to be confirmed per state.]

Account and billing records are kept while your account is open and then for [retention period] to meet tax and audit obligations. Device and usage information is kept for [retention period].

Closing your account does not delete a clinical record that a provider is required by law to keep.

How we protect information

Access is limited to people who need it for their role, transfers are encrypted in transit, and stored information is encrypted at rest. [Specific controls, any certifications, and any independent assessment are to be confirmed.]

No service can promise that information will never be exposed, and this page does not make that promise. If a breach affects you, we will tell you as the law requires.

Counsel to draft

Your choices and rights

Depending on where you live, you may be able to ask for a copy of the information we hold about you, correct it, delete it, limit how sensitive information is used, or opt out of sale and targeted advertising. You can ask us to stop sending marketing at any time, wherever you live.

[The request channel, the identity verification method, the response deadline and the appeal route are to be drafted by counsel.]

A clinician or pharmacy holding your medical record may be required to keep it even where you ask us to close your account. We will not treat you differently for exercising a right.

Counsel to draft

State privacy rights

[California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other state-specific notices are to be drafted by counsel. Several of those laws require a categories-and-purposes disclosure in a fixed format, and some require a “Do Not Sell or Share My Personal Information” link in the site footer.]

[Which US states dose serves is unconfirmed, and that answer decides which of these notices the page has to carry.]

Children’s privacy

dose is for adults. The platform is not intended for anyone under [18], an assessment cannot be completed without confirming age, and we do not knowingly collect information from children.

If you believe a child has given us information, write to us and we will delete it.

Changes to this notice

When this notice changes we update the effective date at the top of the page. Where a change is significant we will tell you before it takes effect. [Notice period for material changes to be confirmed.]

The version in force is the one published here on the day you read it.

Questions about your information

Write to us and we will route your question to the right team. A request about a medical record may have to go to the clinician or the pharmacy that holds it, and we will tell you where to send it. The terms that govern your use of the platform are in the terms and conditions.

[Privacy contact email to be confirmed] · [Registered entity name and postal address to be confirmed] · [Whether a named privacy contact is required, and who it is, to be confirmed]