DoseWeek for Android Privacy Policy

DoseWeek processes only the information below. You can use every basic recording feature without an account.

Payments are handled by Google Play (Google Play Billing). DoseWeek never receives payment details such as card numbers.

Answers from the AI record assistant are made by AI. They are not medical advice, and AI never makes decisions that affect your rights or obligations. It is for adults aged 18 and over.

Features that work only on your device

• Voice input uses your device's speech recognition. Audio is not kept.
• Food label recognition (optional) reads the photo you pick on your device. The photo and the result are not sent, but the recognition feature (Google ML Kit) sends diagnostic information to Google (section 6).
• Reminders are scheduled on your device. Tapping a reminder only opens the app. The home-screen widget shows your schedule status, so anyone who sees the screen can see it; with App Lock on, the widget hides your schedule.
• Calendar sync (optional) adds only the title and time of upcoming injection days to the calendar you choose. That calendar service's policy applies.
• For backup files and CSV exports, you choose where to save them in the system file picker. CSV files are plaintext.
• Google Drive backup (optional) saves an encrypted backup in the app data folder of your own Google account. We do not receive it.
• Android device backup includes DoseWeek records as an end-to-end encrypted copy. You can manage it in your Google account's backup settings.
• Share images are made on your device. You see a preview before sharing, and the image goes only where you choose in the share sheet. Weight, doses and medicine names are never included. Once sent, the recipient's policy applies.
• If you have not turned on motivation notifications written by AI, or you turn them off, motivation notifications use built-in messages that your device picks from the app. In that case your records never leave your device and nothing is transferred abroad. Notifications never show numbers such as weight or dose, medicine names or condition details.

Optional analytics to improve DoseWeek

[Required] Acknowledge the service notice to continue. This acknowledgement alone does not consent to optional usage analytics or overseas data transfer.

Usage analytics and overseas data transfer are both optional and off by default. Analytics starts only after you explicitly consent to both. Declining or withdrawing either consent keeps core features available and preserves your health records. You can withdraw either consent at any time in Settings.

Before you confirm the notice on the first screen, the app sends only an update check (the app version; no account, health or usage data).

• Firebase app instance ID, screen and feature use (event names and times), launches, sessions and time in the app, app version, device model, operating system and language, and your IP address with the approximate location estimated from it. Health records, medicine names and doses, weight, notes, text you type and advertising IDs are never sent.
• Statistics on feature use and improving the service
• Per-user records are kept for 2 months; after that, only statistics remain.
• Your consent to app quality analytics and to the overseas transfer (Korean Personal Information Protection Act, Article 28-8(1)(1)).
• Recipient: Google LLC (overseas transfer: section 6)

Our server also counts requests only as totals, without any user ID, and we look at the weekly install and active-device totals the stores report. They do not calculate numbers of people or individual usage histories. Servers and connection intermediaries nevertheless process connection information such as IP addresses during transport; we do not promise anonymity or untraceability.

We delete information without delay once its purpose is met. We keep information separately only where a law requires it, and only for that period.

• Records on your device: until you delete them (we never receive them)
• Account information: until you delete your account
• Sync copy: 30 days after Plus ends (at once if you delete it yourself)
• Purchase marker: 5 years after account deletion, with no link to the account (Korean e-commerce rules, Enforcement Decree Article 6: payment and supply records)
• Earlier-buyer claim records: until you delete your account (the code that stops a purchase being used twice: 5 years, with no link to the account)
• Complaint and dispute records: 3 years (same rules)
• Store purchase check records: 90 days after the subscription period and the last check end; store notification records: 30 days
• Web server access logs: up to 11 days
• App quality analytics: per-user records 2 months; after that, only statistics remain
• AI usage counts: 2 months; reported answers: 30 days; AI consent records: while your account exists; repeat-trial record: 1 year after its last use
• Motivation notifications written by AI: latest values, notification settings and the encrypted notification token until you turn it off, withdraw consent or delete your account, and at most until 35 days after you last open the app; usage counts 2 months (text written by AI is not kept on the server)

How we delete: all information is kept only as electronic files. When its retention period ends, we delete it from the server data. Deleted information is also gone from server backups within 7 days.

• Health information, such as dose records, body records and condition records, is sensitive information.
• While it stays only on your device, we never receive it.
• Sync (Plus) and the AI record assistant (Pro) send health information to our server. That is why we ask for separate consent to process health information, apart from any other consent (Korean Personal Information Protection Act, Article 23).
• Motivation notifications written by AI (Free, Plus and Pro) also send values about your recording pattern to our server, so they are covered by the same consent to process health information and to the overseas transfer as the AI record assistant.
• Usage analytics and overseas data transfer are both optional and off by default. Analytics starts only after you explicitly consent to both. Declining or withdrawing either consent keeps core features available and preserves your health records. You can withdraw either consent at any time in Settings.
• [Required] Acknowledge the service notice to continue. This acknowledgement alone does not consent to optional usage analytics or overseas data transfer.
• We never sell health information, use it for ads or give it to advertising companies.

We entrust the companies below with work the service needs. Our contracts require them to use the information only for that work.

If these companies or their work change, we will say so in this policy.

Community information is stored on AWS servers in the Republic of Korea. When photos are available, AWS also stores the photos encrypted and checks automatically whether they follow the rules (Amazon Rekognition). Unlike encrypted backup and sync, community photos are information you choose to publish to other community members.

The free version shows non-personalized ads through Google AdMob. With Plus or Pro, the app does not request ads.

To show ads, we provide information to Google as below. Google also uses it for its own purposes.

• Health records, notes and medicine names are never sent for ads.
• Ads in the free version are banners, occasional full-screen ads and rewarded ads. If you like, you can watch an ad to use certain Plus or Pro tools for 24 hours or for one export. You see this ad only when you choose it, and there is no payment. What you opened is saved only on this device. After you close the weekly recap, a rewarded full-screen ad that you can skip may appear. These ads also never appear while you record or on safety guidance.
• In regions where the law requires consent, Google's consent message asks before ads are shown. You can change your choice at any time in Settings > Privacy choices for ads.
• If you do not consent, you still see limited, non-personalized ads.
• Sign-in providers: if you sign in with Google or Apple, that company processes your sign-in information under its own policy (section 6).

Watch an ad for monthly Plus

To verify this benefit, we process a random reward reference, Google’s reward verification result, and the signed-in account’s grant record and start/end times. The custom reward reference sent to Google contains no health records or device/account identifiers. Information Google processes to serve ads is described in the existing ads notice.

Personal information is transferred abroad only in the cases below. For each recipient, we list what the law requires.

Where update guidance is available, the app automatically checks Google Play for a newer version while you use it. If one is available, it shows you an update notice.

If a recipient or country changes, we will tell you, and ask for consent again where the law requires it.

This website uses no cookies or analytics tools. The app does not use cookies either; it uses only the identifiers below.

• App quality analytics uses a Firebase app instance ID (a random identifier for each installation).
• Ads in the free version use the app set ID. The app does not use the Android advertising ID.
• You can withdraw either the usage analytics consent or the overseas data transfer consent independently in Settings. You do not need to delete your health records to withdraw consent.
  
  Withdrawing optional consent or resetting local analytics data does not delete records already sent to Google. A deletion request is separate; making a request does not confirm completed erasure.
  
  Analytics consent is separate from pricing, AI, backup and sync, advertising choices, and age confirmation.

Versions with update guidance check the official store for a newer version. The store receives connection information such as your IP address. Version comparison happens on your device; no health records or DoseWeek account information are sent. The store handles information under its own privacy policy.

Consent texts

Motivation notifications (optional)
Sends warm notifications that encourage you to keep recording.

• Data used: dose records, body records such as weight and waist, and condition and meal records that you entered. This is health information (sensitive data). Values imported from Apple Health or Health Connect are not used.
• How it works: standard notifications use prepared notes chosen on your device. Nothing is sent to an external server, and it is deleted from the device when you turn the feature off or delete the app. With Plus or Pro, if you also turn on “Get motivation notifications written by AI”, only the values described in the AI features consent are sent to the DoseWeek server and Google, and notifications arrive by remote push.
• Lock screen: notifications never show numbers such as weight or dose, medication names or symptoms. Detailed encouragement appears only inside the app.
• No advertising: this data is never used to send ads. Motivation notifications never mention Plus, Pro or discounts.
• Timing: between 8 AM and 9 PM, at the time you choose, at most twice a week.
• Turn off: any time in Settings > Notifications, or right away with “Stop these notifications” on a notification. Every feature works the same if you leave this off.

Turn on AI features?
With Pro, it uses your records to create weekly summaries and general meal ideas, and explains how to use the app. With Plus or Pro, if you turn on “Get motivation notifications written by AI”, AI also writes short notes of encouragement that fit how your logging is going (personalized motivation notification text). AI writes these, not a person, and it does not give medical advice.

What is sent
For weekly summaries, meal ideas and app questions, we show you the content first, and nothing is sent until you tap Send. We send dose counts (on time, late, skipped), the change in the weight you entered yourself, how many times you logged each kind of symptom, the number of days with a meal log together with your protein average and goal, and your streak in weeks. For meal ideas we also send the meal kind, preferences, allergies and disliked foods you choose. Your language and region setting is also sent. Only app help sends the questions you type and the current conversation history, along with the app version, the platform and the current screen. If “Get motivation notifications written by AI” is on, we send only these values, without tapping Send: the kind of moment (just after a record, looking back on the week, a rhythm milestone, a finished schedule, record-only mode, starting again, or everyday), a range for your streak in weeks, a range for this week’s number of records, a range for the days since your last record, your schedule state (active, finished or record-only), the tone you chose, the time of day (morning, afternoon or evening), and your language setting. To send notifications at the right time, we also send the DoseWeek server the time you chose, whether you want them once or twice a week, your device’s time zone, this device’s notification token, and any date you choose to skip a notification. Weight values, dose details, medication names, doses, condition details, mood and notes are never sent. Turning it off in Settings stops it right away.
Model requests built from records exclude medication names and doses, notes, recorded food names, photos, dates, names, email addresses and account identifiers. Meal kinds, preferences, allergies and disliked foods are sent only as values chosen from predefined lists. App help also sends your question and current conversation history, so do not enter names, contact details or other people’s health information. DoseWeek separately processes account and connection information needed for sign-in, usage counts and consent management.
Information imported from Health Connect is not sent.

Where it is processed
The app encrypts the content once more and sends it to the DoseWeek server. The server passes it to Google Cloud Vertex AI, where Gemini, an AI model from Google, creates the answer. DoseWeek uses Google’s Global location (the global endpoint). Google states that such requests “may be processed in any Google Cloud location around the world”. The country where this content is processed can change with each request, depending on which Google servers handle it; Google decides this, so the country cannot be fixed or named in advance.

How notifications are delivered
If “Get motivation notifications written by AI” is on, the DoseWeek server sends notifications by remote push at the time you chose. To deliver them, this device’s notification token and the notification text are sent to Firebase Cloud Messaging, run by Google LLC (United States). Notification text never includes numbers such as weight or dose, medication names, condition or mood, and the motivation notification values above are not sent there. Google uses this only to deliver the notification, and holds it for up to 45 minutes if your device can’t be reached right away.

How long it is kept
The DoseWeek server does not keep what you send to the AI record assistant or its answers. Google does not use what you send or the answers to train AI models. To speed up responses, Google may hold this content in memory for up to 24 hours, and if Google’s automated abuse checks flag a request, Google may store that request for up to 90 days, and authorized Google staff may review it. DoseWeek does not save your conversations. Only up to 2 weekly summary cards are saved on your device, and they are excluded from sync and backups. Usage counts (without content) are kept for up to 2 months, and consent records for as long as your account exists. If you report an answer and choose “Include the answer text”, only that answer is kept for 30 days. To send motivation notifications at the right time, the DoseWeek server keeps only your latest motivation notification values, your notification settings (time, once or twice a week, time zone, tone, language, dates to skip) and an encrypted notification token. They are replaced each time you open the app, and deleted right away when you turn the feature off, withdraw consent or delete your account. They are also deleted 35 days after you last open the app. Notification text written by AI is not kept on the server after it is sent. With Pro, only the day’s in-app encouragement card note is kept on your device, and it is deleted the first time you open the app after that day. It is excluded from sync and backups.

This is not end-to-end encryption
While the AI is making an answer, the DoseWeek server and Google can read what you sent. Google can also read it for as long as Google holds it: in memory for up to 24 hours, or for up to 90 days when Google’s abuse checks flag a request, which authorized Google staff may then review. Sync and backup data stay protected by end-to-end encryption, as they are now.

You don’t have to agree
Only the AI features will be unavailable; the other Pro and Plus features keep working. Motivation notifications use our prepared notes. You can withdraw consent at any time in Settings > AI record assistant or Settings > Notifications > Motivation notifications.

Transfer to another country
To create AI answers and motivation notification text, DoseWeek sends what you confirm and your motivation notification values to Google and entrusts Google with processing them. This transfers your information to another country. Recipient: Google Cloud Korea LLC (the contracting entity Google’s terms name for a billing address in the Republic of Korea; Seoul, Republic of Korea) and Google Asia Pacific Pte. Ltd. with its affiliates, including Google LLC (United States) (contact: https://support.google.com/cloud/contact/dpo). Country: Global (no single country). DoseWeek uses Google’s Global location (the global endpoint), and Google states that such requests “may be processed in any Google Cloud location around the world”. The country where this content is processed can change with each request, depending on which Google servers handle it; Google decides this, so the country cannot be fixed or named in advance. Google lists its locations at https://cloud.google.com/about/locations. Of the recipients named in this notice, Google LLC is located in the United States and Google Asia Pacific Pte. Ltd. in Singapore; the data-protection systems of these two countries are described next. The United States has no comprehensive federal law on personal information; sector-specific federal laws and state laws apply, and it takes part in the APEC Cross-Border Privacy Rules (CBPR) system. Google Asia Pacific Pte. Ltd. is located in Singapore. Singapore has a comprehensive personal data protection law (the Personal Data Protection Act 2012) and takes part in the APEC CBPR system. Items: the content listed under “What is sent”. When and how: each time you tap Send. If “Get motivation notifications written by AI” is on, also when motivation notification text is created (up to twice a week) and, with Pro, when the in-app encouragement card is created (up to once a day). Everything goes over an encrypted connection through the DoseWeek server. Purpose and retention: Google uses this content to create the AI answers you request and personalized motivation notification text. To speed up responses, Google may hold this content in memory for up to 24 hours, and if Google’s automated abuse checks flag a request, Google may store that request for up to 90 days, and authorized Google staff may review it. How to refuse: leave the transfer box below unticked, or withdraw your consent later in the app’s settings; then only the AI features are unavailable, and motivation notifications use our prepared notes. DoseWeek is operated in the Republic of Korea, where the Personal Information Protection Act (PIPA) applies under the supervision of the Personal Information Protection Commission. Google acts as a processor under Google’s Cloud Data Processing Addendum.

☐ [Optional] I agree to the processing of my health (sensitive) information

Purpose: creating AI weekly summaries and meal ideas, answering app-use questions, and creating personalized motivation notification text / Data: the records and meal choices and the motivation notification values under “What is sent” above, and app-help questions and current conversation history / Retention: what you send and the answers are not kept on the DoseWeek server (only the latest motivation notification values and settings are kept, until you turn it off, withdraw, or don’t open the app for 35 days); at Google, in memory for up to 24 hours, or for up to 90 days when a request is flagged for abuse review (if an answer is included with a report, only that answer for 30 days) / If you decline, everything except AI keeps working, and motivation notifications use our prepared notes

☐ [Optional] I agree to the transfer of my information to Google in another country, as described above

☐ I am 18 or older

On the free plan, two parts of this screen read differently

On the free plan too, if you turn on ‘Get motivation notifications written by AI’, AI writes one short, personalized line of encouragement a week that fits your logging rhythm. It is written by AI, not a person, and gives no medical advice. Agreeing is optional.

Transfer to another country
To create personalized motivation text, DoseWeek sends your motivation values (ranges for rhythm weeks, records this week and days since your last record, and your logging stage), plus your chosen tone and language, to Google for processing. This transfers personal data to other countries. Recipients: Google Cloud Korea LLC, Google Asia Pacific Pte. Ltd. and its affiliates, including Google LLC (United States). Country: Global. The Google Cloud location can differ for each request and cannot be set in advance; Google LLC is in the United States and Google Asia Pacific Pte. Ltd. is in Singapore. When and how: once a week, when the notification text is created, sent encrypted through the DoseWeek server. Retention: Google may keep this content in memory for up to 24 hours to respond faster, and may keep requests flagged by automated abuse detection for up to 90 days. The DoseWeek server keeps only your latest notification values and settings, and deletes them as soon as you turn the feature off, withdraw consent or delete your account, or 35 days after you last opened the app. How to refuse and what happens: leave the overseas transfer box unticked, or withdraw later in Settings. You then get no AI notification, and your motivation notifications continue with lines chosen on your device.

• At any time, you can ask to see, correct or delete your personal information, to stop its processing, to withdraw consent, or to export it.
• Do it yourself in the app's Settings, or write to wonyoung@wonyoungchoi.dev. A legal representative or someone you authorize can also ask for you.
• We check only what we need to confirm it is you. We answer requests to see your information within 10 days.
• If we refuse or limit a request, we tell you why and how to object.
• App quality analytics records already sent are deleted automatically after 2 months, and only statistics remain. To delete them sooner, copy the analytics deletion request code in Settings, and send it to wonyoung@wonyoungchoi.dev.
  
  Withdrawing optional consent or resetting local analytics data does not delete records already sent to Google. A deletion request is separate; making a request does not confirm completed erasure.
• DoseWeek is for adults aged 18 and over. We do not knowingly collect personal information from children under 14, and we delete it as soon as we learn of it.
• If you need help with a privacy violation in Korea, you can contact the Personal Information Protection Commission, the Privacy Infringement Report Center (call 118 in Korea) or the Personal Information Dispute Mediation Committee.

• In the app: go to Settings > Account > Delete account. You confirm it is you by signing in.
• What is deleted: sign-in links and sessions, subscription links, AI consent records and usage counts, account records, community posts, comments and photos, motivation notification settings and the notification token, monthly Plus reward records, earlier-buyer claim records, and the encrypted sync copy.
• You can also keep your account and delete only the server copy (reset sync).
• Without the app: use the account deletion page or write to wonyoung@wonyoungchoi.dev. Never send passwords, recovery codes or health records.
• What remains: only what the law requires, namely a purchase marker with no link to your account (5 years, including the code that stops an earlier-buyer claim being used twice), complaint and dispute records (3 years) and store purchase check records (90 days). Deleted information is gone from server backups within 7 days.
• Records on your device: delete them in Settings > Delete all data. Deleted records cannot be restored.
• Delete exported files, calendar events and Google Drive backups separately.
• Progress photos: delete a photo in the app, or delete the app. Delete photos you saved outside the app separately.
• Deleting your account does not cancel a Plus or Pro subscription, which you manage in Google Play.
• We confirm the result after the deletion has actually happened.
• You can withdraw either the usage analytics consent or the overseas data transfer consent independently in Settings. You do not need to delete your health records to withdraw consent.
  
  Withdrawing optional consent or resetting local analytics data does not delete records already sent to Google. A deletion request is separate; making a request does not confirm completed erasure.

To participate where the community is available, you must be 18 or older and separately agree to the rules and to personal and sensitive information processing. Only app cards you choose are shared. Rule violations may lead to removal or restrictions. Reports, blocking and contact are available through community settings in the app. Leave the community to stop participating.

• Access control: only people who need it to run the service can reach our servers and data.
• Encryption: every connection is encrypted. Sync and backups are encrypted on your device (end-to-end encryption), so we cannot read them.
• Device protection: App Lock (optional) uses your device's own screen lock, and DoseWeek stores no biometric data.
• If something goes wrong: if you suspect a data breach, tell us at wonyoung@wonyoungchoi.dev. If we confirm a breach, we notify you without delay as the law requires.

• Operator: Wonyoung Labs (원영랩스), Republic of Korea
• Mail-order business registration number: 제 2026-부산금정-0425 호
• Person in charge of privacy: Wonyoung Labs Privacy Team
• Contact: wonyoung@wonyoungchoi.dev

Never email health records, backup files or recovery codes.

• EU, EEA, UK and Switzerland: the new version with accounts and subscriptions is not sold in these regions, so we have not appointed a representative there. If you already use DoseWeek there, your GDPR (and UK GDPR) rights still apply. We process general information when the service needs it or you consent, and health information only with your explicit consent. We usually answer requests within 1 month, and you can complain to the supervisory authority where you live. Transfers abroad use safeguards such as standard contractual clauses; you can ask us for a copy by email.
• Japan: we ask for consent before receiving health information (special care-required personal information). We provide it abroad only with consent or another lawful route.
• Brazil: you can use your LGPD rights through the same contact, and we can help in Portuguese.
• United States: consumer health data is covered in our US Consumer Health Data Privacy Policy.

• This policy is effective from October 27, 2026.
• When it changes, we post the new version on this page with its new effective date, and ask for consent again where the law requires it.
• If you need an earlier version, ask us at wonyoung@wonyoungchoi.dev.