Privacy Policy - DoseMate

Last updated: October 12, 2026

This Privacy Policy describes how Eficácia Quotidiana Lda, a company established in Portugal ("we", "us", "our"), developer of DoseMate (the "Application", available as a mobile app and on the web), collects, uses, shares and stores personal data when you use the Application. We are the data controller for this processing. Contact: contact@getdosemate.com.

1. Information We Collect

When you create an account and use the Application, we collect:

Account and professional information: full name, email address, profession, medical specialty and institution.
Account data: password (stored only as a cryptographic hash), timezone, country code and the country of your app store.
Subscription data: plan, status, start and end dates of your free trial or subscription, and the number of free trial days used. We receive this information from the app stores through our subscription provider (see section 4). We never receive your card or bank details.
Settings you save: personalized clinical settings, such as custom drug dilutions and dilution labels, and recently used drugs.
Usage data: in-app events, such as which drug pages you open, linked to your account, used to understand how the Application is used and to improve it.
Technical data: server logs (such as IP address, date and time of requests and error messages) used to operate the service and keep it secure.

The Application does not collect your location, contacts, photos, health data about you or data about patients. Do not enter patient-identifying information in the Application.

Some preferences (such as language and session data) are stored only on your device.

2. How We Use Your Information and Legal Basis

To provide the service (create and authenticate your account, save and sync your settings, manage your free trial and subscription, password recovery and essential service messages): performance of our contract with you (Art. 6(1)(b) GDPR).
To keep the service secure and working (server logs, abuse prevention): our legitimate interest (Art. 6(1)(f) GDPR).
To understand and improve the Application (usage data): our legitimate interest (Art. 6(1)(f) GDPR). You may object at any time by contacting us.
To comply with legal obligations (for example, accounting and tax): legal obligation (Art. 6(1)(c) GDPR).

We do not sell your personal data, we do not use it for advertising and we do not track you across other companies' apps or websites.

3. Account and Data Deletion

You can delete your account at any time:

In the Application: Settings > Delete account. You confirm with your password and the deletion takes effect immediately.
On the web: sign in at brainboxmed.com/dosemate/settings and use the same option.
By email: write to contact@getdosemate.com from the email address of your account, with the subject "Account Deletion Request". We will process the request within 30 days.

When you delete your account, we permanently delete your account, profile, saved settings and subscription data from our databases. Usage records are kept only in anonymized form, no longer linked to you.

Deleting your account does not cancel a subscription purchased through the App Store or Google Play. Cancel it in your store account settings to avoid further charges. Records of purchases held by Apple, Google and our subscription provider are kept by them as required for accounting and legal purposes.

4. Service Providers We Share Data With

We share personal data only with providers that process it on our behalf and under our instructions:

DigitalOcean - hosting of our servers and database.
Zoho (ZeptoMail) - sending of transactional emails, such as password reset (your email address and the message content).
RevenueCat - management of in-app subscriptions. It receives an internal account identifier (not your name or email) and the purchase and subscription information provided by the app stores.
Apple (App Store) and Google (Google Play) - processing of payments, under their own privacy policies. We do not receive or store your financial information.

Some of these providers may process data outside the European Economic Area. In that case, the transfer is protected by an adequacy decision of the European Commission (such as the EU-U.S. Data Privacy Framework) or by the European Commission's Standard Contractual Clauses.

We may also disclose data when required by law or by a competent authority.

5. Data Retention

We keep your account data while your account exists. When you delete it, the data is deleted as described in section 3. Server logs are kept only for a limited period, as needed for security and troubleshooting. Data we must keep by law (for example, for accounting) is kept for the period required by law.

6. Data Security

All communications between the Application and our servers are encrypted in transit (HTTPS). Passwords are stored only as cryptographic hashes and cannot be read by our team. Access to the servers and database is restricted. No system is completely secure, but we work to protect your data and will notify you and the authorities of a personal data breach when required by law.

7. Your Rights

Under the General Data Protection Regulation (GDPR) and, where applicable, other laws such as the Brazilian LGPD, you have the right to access, rectify and delete your data, to restrict or object to its processing, and to data portability. To exercise these rights, contact contact@getdosemate.com. We will reply within one month.

You also have the right to lodge a complaint with a data protection authority. In Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD, www.cnpd.pt). You may also contact the authority of your country, such as the Agencia Española de Protección de Datos (AEPD) in Spain or the Autoridade Nacional de Proteção de Dados (ANPD) in Brazil.

8. Intended Users

The Application is intended for healthcare professionals and students. It is not directed to children, and we do not knowingly collect data from anyone under 16.

9. Changes to This Policy

We may update this policy. We will change the "Last updated" date and, for significant changes, inform you in the Application or by email.

10. Contact

For questions about this policy or your personal data, contact Eficácia Quotidiana Lda at: contact@getdosemate.com.