Privacy Policy

1. About this policy

Dovy (דובי) is an iPhone app for recording medication schedules, doses, meals, weight and progress. Daniel Namatinia ("we", "us") publishes Dovy and is responsible for the personal information processed through our services. This policy covers the app, its backend and this website.

2. Information on your device

Your profile and setup answers, medication plans, dose history, injection sites, meal diary, weight, notes and preferences are stored locally on your device. The app does not provide cloud diary synchronization. Manual searches in the bundled food database work offline. Widgets use a shared local snapshot to display your information.

Exports and reports contain the information you choose to share. Copies you save or send, and device backups managed by Apple, are outside the app’s local storage. Protect these copies and delete them separately when needed.

3. Optional online features

Smart meal recognition and food lookup

Smart recognition requires an active subscription, Sign in with Apple and your consent. When you submit a meal photo, description or correction, it is sent through Dovy’s Cloudflare backend to OpenAI for analysis. The app sends the meal input and processing context, such as language; it does not send your entire medication or weight diary for meal recognition.

Our backend does not persist meal photos or personalized recognition results to disk. Temporary results are held in memory with an expiry of up to about one hour. This is separate from provider retention: OpenAI may retain API content for abuse monitoring under its API data policy. API content is not used to train OpenAI models by default. Do not include information about other people in submitted photos or descriptions.

Online food and barcode lookup may send food search terms or product barcodes to Open Food Facts or USDA FoodData Central. Public food lookup results and search terms may be cached on our server. These are separate from your saved meal diary.

Account and subscription

Sign in with Apple is optional for local tracking and is required for smart recognition. The app does not request your name or email from Apple. Our server stores a hashed account identifier, an encrypted Apple refresh token, session and device-verification records, subscription ownership and usage counters. We use these to authenticate requests, verify subscriptions and enforce usage limits. We do not receive your Apple password or payment card details.

Lock Screen countdowns

When enabled, medication name, dose, reminder time, an installation identifier and push tokens are sent to Dovy’s backend and Apple so a Live Activity can start while the app is closed. Medication details may be visible on your Lock Screen. Disabling countdowns cancels the server schedule when your device next connects. Scheduled medication details are cleared after the reminder window; inactive registration metadata expires separately.

4. Apple Health and permissions

With your permission, Dovy requests access to read steps and body weight and to write weight to Apple Health. The current app reads steps and can save weight entries to Health. Health information is processed on your device and is not sent to our meal-recognition service or used for advertising.

Camera access is used for meal photos and barcode scanning. You can select a meal photo using the system photo picker. Notification permission enables reminders. You can change these permissions in iOS Settings and revoke Health access in the Health app. Revoking a permission affects the associated feature.

5. Providers and technical information

• Apple provides App Store billing, Sign in with Apple, HealthKit and push delivery. Apple handles payment information under its own policies.
• Cloudflare hosts our backend and processes online requests, account records, verification records and reminder schedules.
• OpenAI processes submitted meal content as explained above.
• Superwall delivers paywalls and records subscription and paywall interactions. It receives an app user or installation identifier, device/app metadata, subscription information and network information such as IP address. When you sign in, we identify the account using an opaque identifier, not your email or Apple identity.
• Open Food Facts and USDA receive food queries or barcodes when used for online lookup.
• Netlify hosts this website and receives ordinary request information, such as IP address and browser information. This site has no analytics scripts, advertising cookies or sign-in form.

Online providers may process information outside your country. Their policies describe their infrastructure, retention and safeguards: Apple, Cloudflare, Superwall and Netlify.

6. How information is used

We use information to provide the features you request, personalize your local tracking, verify access, prevent abuse, operate subscriptions and answer support requests. If you email us, we receive your email address and the content you send. Avoid sending medical details unless needed for your request.

We do not sell your personal information or use your health diary for advertising. Where applicable privacy law requires a legal basis, we rely on providing the service you request, consent for optional sensitive-data processing, legitimate interests in service security and support, and legal obligations where applicable. You can withdraw consent by stopping the optional feature and revoking its permission; this does not affect earlier lawful processing.

7. Retention and deletion

Local diary information remains until you remove it or reset the app’s data. Exported backups and Health records are separate copies. Removing Dovy does not automatically remove those copies or close a server account.

To delete your server account and diary on the current device, open Dovy → Settings → Your account → Delete account and local data. Account deletion removes the active account, sessions and associated device authorization. Limited opaque purchase-ownership and abuse-prevention records remain for up to 14 days; they do not contain meal photos or diary entries. Ordinary device security and usage records are separate from your diary.

You can export your diary or reset local data in Settings. If you cannot access the app, or want help deleting information held by our service providers, contact us below. We may need to verify your identity without asking for your password. Provider security logs, legally required records, and copies you independently exported can have different retention periods.

Deleting the app or account does not cancel a subscription. Manage it through Apple subscriptions.

8. Your choices and rights

Depending on your location, you may have rights to access, correct, export or delete personal information, object to or restrict certain processing, and withdraw consent. Contact us to exercise these rights or raise a concern. You may also complain to your local data-protection authority. We respond within applicable legal time limits.

Dovy is intended for adults aged 18 or older. If you believe a child has provided personal information through Dovy, contact us so we can investigate and remove it as appropriate.

9. Security and policy updates

Online requests use encrypted connections, and backend access is protected using account/session verification and device verification. No system provides absolute security. We may update this policy as the service changes and will update the date on this page. Where required, we will provide additional notice or obtain consent.

10. Contact

For support, privacy questions or deletion requests, contact Daniel Namatinia, publisher of Dovy:

bananabusdaniel@gmail.com