Effective Date: June 9, 2026
OurOdysea LLC ("OurOdysea™," "we," "us," or "our")
App Name: DoseStack™
Website: https://www.dosestack.app/
Privacy Contact: support@ourodysea.com
This Privacy Policy describes how OurOdysea LLC collects, uses, discloses, retains, and protects information when you use the DoseStack mobile application, website, and related services (collectively, the "Services").
By using DoseStack, you agree to the collection, use, and handling of your information as described in this Privacy Policy.
1) Scope and Purpose
DoseStack is a personal health-tracking and organizational tool that allows users to record, store, review, and organize self-entered information regarding medications, hormones, peptides, supplements, symptoms, wellness indicators, laboratory values, dosing schedules, and related data.
IMPORTANT DISCLAIMER: DoseStack does not provide medical advice, diagnosis, treatment, prescriptions, dosing recommendations, or clinical decision support. DoseStack is not a medical device and is not a substitute for professional medical care.
All information is for personal tracking, organization, and informational purposes only. Use of the Services does not create any doctor-patient, provider-patient, pharmacist-patient, therapist-client, or fiduciary relationship with OurOdysea LLC.
Users are solely responsible for consulting licensed healthcare professionals regarding all medical decisions.
2) Current Consumer App Model and HIPAA Status
DoseStack is currently offered as a direct-to-consumer personal health-tracking and organizational app.
OurOdysea LLC is not acting as a health plan, health care provider, health care clearinghouse, or business associate on behalf of a HIPAA-covered entity in connection with the Services.
DoseStack is not intended to be used as a provider-controlled patient portal, electronic health record, clinical documentation system, pharmacy system, health information exchange, or medical records platform.
Although DoseStack is not HIPAA-covered in its current consumer-only model, OurOdysea LLC uses privacy and security practices designed to protect consumer health information and complies with applicable consumer privacy, data security, and breach notification laws.
3) Information We Collect
A. Information You Provide Directly
Depending on how you use DoseStack, we collect information you provide directly, including:
Account Information
• Name
• Email address
• Date of birth
• Sex
• Login credentials
• Profile details
• User preferences
Health and Tracking Data
• Medication names
• Supplement names
• Hormones, peptides, or other treatment-related entries
• Dosages
• Administration routes
• Schedules
• Dose logs
• Injection sites
• Treatment programs and protocols
• Symptoms
• Wellness ratings
• Laboratory values
• Personal notes
• Optimization Assessment scores and history
• Provider visit preparation summaries
• Reports or exported content created within the app
User Content
• Dose logs
• Treatment programs
• Reflections
• Provider visit summaries
• Exported reports
• AI-generated summaries or pattern observations
• Any other content you create, save, or upload within DoseStack
Support and Feedback
• Communications you send to our support team
• Survey responses
• Feedback submissions
• Account deletion or privacy requests
Subscription and Billing Information
• Subscription status
• Transaction receipts
• Purchase history received from Apple App Store or Google Play Store
• RevenueCat subscription identifiers
We do not collect or store credit card numbers, bank account details, or other direct payment instruments. Payments are processed through Apple App Store or Google Play Store.
Sensitive Data Warning: Do not submit Social Security numbers, insurance identifiers, full payment card numbers, government-issued IDs, or other unnecessary sensitive identifiers through DoseStack. All health-related data is voluntarily self-entered by users and is not clinically reviewed, verified, or validated by OurOdysea LLC.
B. Information Collected Automatically
DoseStack does not use third-party analytics, advertising, crash-reporting, behavioral tracking, product event-tracking, or performance-monitoring technologies.
When you use DoseStack, certain technical information is collected or processed automatically to operate, secure, debug, and maintain the Services. This includes:
• Basic request information, such as request type, request path, status, and response time
• IP address and basic network request information
• Device or app runtime information needed for app delivery and operation
• Authentication or session information needed to keep you signed in securely
• Push notification tokens, if you enable reminders or notifications
• Subscription or purchase status information received from Apple, Google, or RevenueCat
• A randomly generated account identifier used for operational troubleshooting and security monitoring
DoseStack diagnostic server logs contain only technical request information and a randomly generated account identifier. These logs do not intentionally include your name, email address, phone number, medication names, supplement names, dosages, symptoms, lab results, notes, wellness entries, or report contents.
We use this limited technical information to operate the app, maintain account security, troubleshoot technical issues, manage subscriptions, deliver notifications you enable, and improve app reliability.
C. Information from Third-Party Sources
We receive limited information from third-party services, including:
Apple App Store and Google Play Store
• Billing records
• Subscription status
• Receipt validation data
• Purchase history
Authentication Providers
• Identity tokens
• Basic profile information, if third-party sign-in is used
RevenueCat
• Subscription status
• Purchase status
• Anonymous or pseudonymous subscription identifiers
4) Third-Party Services and Vendors
DoseStack integrates with third-party services that help us operate, host, maintain, secure, and improve the Services.
Current third-party services include:
Supabase
Supabase provides authentication, database hosting, and backend infrastructure. Supabase is the system of record for DoseStack account data and health-related user data, including programs, medications, doses, symptoms, wellness entries, lab values, and notes entered by users.
Replit
Replit hosts the DoseStack application server and serves the DoseStack website and backend application code. Replit retains short-term operational server logs for debugging and security purposes. These logs contain technical request information and a randomly generated account identifier, but do not intentionally include names, emails, medication names, supplement names, dosages, symptoms, lab values, wellness entries, notes, or report contents.
OpenAI
DoseStack uses OpenAI for AI-powered features such as provider visit summaries, pattern observations, report summaries, and motivational content.
When you choose to use AI-powered features, DoseStack sends relevant health-tracking data to OpenAI for processing. This may include medications, supplements, doses, dates, symptoms, wellness check-ins, lab values, and related self-entered information needed to generate the requested AI feature.
This data is stripped of direct identifiers before it leaves our systems. We do not intentionally send your name, email address, date of birth, contact information, payment information, or account identifier to OpenAI.
OpenAI receives this information only when you choose to use AI-powered features.
RevenueCat
RevenueCat manages subscription status and purchase receipts. RevenueCat receives a pseudonymous account identifier and purchase or subscription status information only.
DoseStack does not intentionally send medication names, supplement names, dosages, symptoms, lab values, wellness entries, health notes, treatment protocols, or report contents to RevenueCat.
Expo / EAS
Expo and EAS are used for app delivery, app runtime support, and over-the-air updates. Expo / EAS may process app or runtime metadata needed to deliver and maintain the app.
DoseStack does not intentionally send medication names, supplement names, dosages, symptoms, lab values, wellness entries, health notes, treatment protocols, or report contents to Expo / EAS.
Postmark
Postmark is our email delivery provider. Postmark processes your email address and the contents of the service communications we send you, such as account verification, password reset, security alerts, subscription notices, support responses, and policy updates.
DoseStack does not intentionally send medication names, supplement names, dosages, symptoms, lab values, wellness entries, health notes, treatment protocols, or report contents to Postmark.
Apple and Google
Apple and Google process subscription, payment, device, app store, and platform-related information according to their own terms and privacy policies.
Each third-party provider is expected to protect data in accordance with its contractual obligations, published privacy policies, and applicable law.
5) Third-Party AI Processing
DoseStack uses artificial intelligence to generate provider visit summaries, detect patterns, create report summaries, and provide other organizational or motivational features.
When you choose to use AI-powered features, DoseStack sends relevant health-tracking data to our AI provider, OpenAI, to generate your results.
This may include:
• Medication names
• Supplement names
• Dosages
• Frequencies
• Dates
• Symptoms
• Wellness check-ins
• Lab values
• Related self-entered tracking information needed for the requested AI feature
This data is stripped of direct identifiers before it leaves our systems.
We do not intentionally send direct identifiers such as your name, email address, date of birth, contact information, payment information, or account identifier to OpenAI. The information sent to OpenAI may still include sensitive health-tracking details needed to generate the requested AI feature.
The data may include internal reference numbers that link your entries to one another for analysis. These internal reference numbers are not tied to your name, account, email, or contact information.
OpenAI processes this data to return your requested AI results. OurOdysea LLC does not use your data to train, fine-tune, or improve AI models. OpenAI’s handling of API data is governed by OpenAI’s applicable terms, privacy policies, and data processing practices.
You should not include your name, email address, phone number, address, Social Security number, insurance identifier, payment information, or government-issued ID in notes, summaries, or other free-text fields.
AI-generated content is for informational and organizational purposes only. It is not medical advice, diagnosis, treatment, dosing guidance, prescription guidance, clinical decision support, or a substitute for professional medical care.
AI-generated content may be incomplete, inaccurate, misleading, or not applicable to your situation. Always review health-related decisions with a qualified healthcare provider.
6) How We Use Your Information
We use the information we collect to:
• Operate, maintain, and improve DoseStack
• Create and manage your account
• Provide dose tracking, reminders, scheduling, and organization tools
• Store and display medication, supplement, symptom, lab, wellness, and tracking information entered by you
• Generate summaries, reports, exports, and provider visit preparation materials at your request
• Provide AI-powered features such as provider visit summaries, report summaries, motivational content, and pattern observations
• Process and manage subscriptions through Apple, Google, and RevenueCat
• Send service-related communications, such as account verification, security alerts, subscription notices, support responses, and important policy updates
• Monitor app security and operational reliability
• Detect, investigate, and prevent fraud, abuse, unauthorized access, and security threats
• Respond to user support requests and privacy requests
• Comply with legal obligations, enforce our Terms of Service, and respond to lawful requests
We do not use your personal data or consumer health information for:
• Targeted advertising
• Behavioral advertising
• Cross-app tracking for advertising purposes
• Selling personal data
• Selling consumer health information
• Renting or leasing personal data to third parties
• Data broker purposes
7) Health Data Responsibility
All medical and health-related information is entered at your sole discretion and risk.
OurOdysea LLC does not verify the accuracy, completeness, appropriateness, safety, or clinical relevance of any health data entered into DoseStack.
You assume full responsibility for any reliance on information stored, displayed, summarized, calculated, exported, or generated within the Services.
DoseStack is an organizational tool. It does not replace professional medical advice, medication instructions, prescription labels, pharmacy guidance, laboratory reports, or clinical judgment.
8) Information Sharing and Disclosure
We do not sell your personal data or consumer health information.
We share information only in the following circumstances:
Service Providers
We share information with vendors who help us operate the Services, including hosting providers, database providers, authentication providers, subscription management services, AI processing providers, email delivery providers, app delivery providers, and infrastructure providers.
These providers may only use the information to perform services for us.
OpenAI / AI Processing
When you choose to use AI-powered features, health and tracking information that has been stripped of direct identifiers is transmitted to OpenAI for processing.
This may include medications, supplements, doses, dates, symptoms, wellness entries, lab values, and related self-entered information needed to generate the requested AI feature.
OpenAI receives this information only when you use AI-powered features.
Subscription Management
Subscription status, transaction receipts, and purchase information are processed by Apple, Google, and RevenueCat.
RevenueCat receives subscription/purchase status and an anonymous or pseudonymous account reference needed to manage your subscription.
We do not intentionally send health details such as medication names, supplement names, dosages, symptoms, lab values, treatment protocols, wellness entries, health notes, or report contents to subscription management services.
Legal Requirements
We may disclose information when required by law, regulation, legal process, subpoena, court order, or enforceable governmental request.
Safety and Protection
We may disclose information when we believe it is necessary to protect the rights, property, or safety of OurOdysea LLC, our users, or the public.
Business Transfers
We may disclose or transfer information in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar business transaction.
If such a transfer occurs, we will take reasonable steps to require the successor entity to honor this Privacy Policy or provide notice of material changes.
With Your Consent
We may share information when you explicitly authorize or direct us to do so.
9) Consumer Health Information
DoseStack collects and maintains consumer health information that users voluntarily enter into the app.
Consumer health information may include medication names, supplement names, dosages, schedules, dose logs, symptoms, wellness ratings, lab values, treatment programs, health notes, provider visit summaries, and related information.
We do not sell consumer health information.
We do not share consumer health information for targeted advertising, behavioral advertising, cross-app advertising, or data broker purposes.
We use consumer health information to provide the Services, support user-requested features, maintain the app, generate reports and summaries, secure the Services, respond to support requests, and comply with applicable legal obligations.
10) Analytics, Advertising, and Tracking
DoseStack does not use third-party analytics, advertising, crash-reporting, behavioral tracking, product event-tracking, or performance-monitoring technologies.
DoseStack does not use Google Analytics, Firebase Analytics, Sentry, Crashlytics, Amplitude, Mixpanel, PostHog, Segment, Datadog, New Relic, Expo Insights, or similar analytics or tracking tools.
We do not sell or share your information for advertising.
We do not use health information for targeted advertising, behavioral advertising, cross-app tracking, or sale to data brokers.
Health information you enter is stored with our database provider, Supabase, and is processed by OpenAI only when you choose to use AI-powered features.
Diagnostic server logs contain only technical request information and a randomly generated account identifier. They do not intentionally contain your name, contact details, medications, dosages, symptoms, lab results, wellness entries, notes, or report contents.
11) Data Retention and Deletion
Active Accounts
Your data is retained for as long as your account remains active or as needed to provide the Services.
Deleted Accounts
Upon account deletion, your personal data and associated content are permanently deleted within 30 days, subject to the limited retention described below.
See our Delete Account Policy for full details:
https://www.dosestack.app/delete-account
Compliance Records
Certain records may be retained for up to 7 years where required for tax, accounting, financial, fraud prevention, dispute resolution, or legal compliance purposes.
System Logs
Technical logs, security logs, diagnostic logs, and backups are rotated and purged on a regular schedule, typically within 90 days.
Pre-existing logs created before recent logging restrictions may age out under normal log rotation.
Anonymized, Aggregated, or De-Identified Data
Aggregated or de-identified data that cannot reasonably be used to identify you may be retained indefinitely for security, product reliability, and product improvement.
Backups
Deleted data may remain in encrypted backups for a limited period until backups are overwritten or purged according to our standard backup cycle.
All retained data is limited to the minimum reasonably necessary for the stated purpose.
12) Account Deletion
You may delete your account at any time through the in-app Settings screen or by emailing support@ourodysea.com.
Upon deletion, your account will be deactivated and your personal data, health records, logs, and associated content will be permanently removed within 30 days, subject to limited retention for security, legal, backup, and compliance purposes.
Account deletion does not automatically cancel platform-managed subscriptions. If you have an active subscription, you must cancel it through Apple App Store or Google Play Store.
For full details, see our Delete Account Policy:
https://www.dosestack.app/delete-account
13) Data Export
You may request or generate an export of your DoseStack information where available.
Reports, summaries, or exports may contain sensitive health information you entered into DoseStack. You are responsible for protecting exported files after they leave the app.
If you choose to share, print, download, upload, or provide an exported report to a healthcare provider or any other person, you are responsible for that sharing decision.
DoseStack reports and summaries are organizational tools only. They are not medical records, clinical documents, prescriptions, laboratory reports, or professional medical assessments.
Reports are generated for download or sharing from the user’s device.
14) Your Rights and Choices
Depending on your jurisdiction, you may have rights regarding your personal information, including:
Access
You may request a copy of the personal data we hold about you.
Correction
You may request correction of inaccurate or incomplete data.
Deletion
You may request deletion of your account and associated data.
Data Portability
You may request an export of your data in a structured, commonly used format where available.
Opt-Out
You may opt out of non-essential communications.
Withdraw Consent
Where processing is based on consent, you may withdraw consent at any time.
AI Features
Where AI-powered features are optional or configurable, you may disable or avoid using those features.
If an AI-powered feature is required for a specific report, summary, or pattern observation, you should not use that feature unless you agree to the AI processing described in this Privacy Policy.
To exercise rights or make a privacy request, use the in-app tools in Settings or contact us at support@ourodysea.com with the subject line "Privacy Request."
We will respond within 30 days unless a different timeline is required by applicable law.
California Residents
California residents may have the right to know what personal information is collected, request deletion, correct inaccurate personal information, limit certain uses of sensitive personal information, and opt out of the sale or sharing of personal information.
We do not sell personal information or consumer health information.
Washington Residents and Consumer Health Data
Washington residents may have rights related to consumer health data under Washington’s My Health My Data Act, including rights to access, delete, or withdraw consent for certain collection or sharing of consumer health data, subject to applicable exceptions.
DoseStack does not sell consumer health data.
DoseStack does not use geofencing around healthcare facilities.
DoseStack does not share consumer health data for targeted advertising, behavioral advertising, cross-app tracking, or data broker purposes.
To exercise consumer health data rights, contact support@ourodysea.com with the subject line "Consumer Health Data Request."
EEA/UK Residents
EEA and UK residents may have additional rights, including the right to restrict processing, object to processing, request data portability, and lodge a complaint with a supervisory authority.
15) Data Security
We use reasonable administrative, technical, and organizational safeguards designed to protect your information.
These safeguards include:
• Encryption of data in transit
• Encryption of data at rest where supported by our infrastructure
• Authentication controls
• Role-based access controls for internal systems
• Restricted administrative access
• Security monitoring
• Data minimization practices
• Logging restrictions designed to keep health data out of operational logs
• Secure software development practices
No system can be guaranteed to be 100% secure.
If you believe your account or information has been accessed without authorization, contact us immediately at support@ourodysea.com.
16) Health Data Breach Notification
DoseStack is a consumer health application and is not currently operated on behalf of a HIPAA-covered entity.
Certain consumer health privacy and breach notification laws apply, including the FTC Health Breach Notification Rule.
If we discover a breach of unsecured identifiable health information, we will investigate the incident and provide notices as required by applicable law.
Depending on the circumstances, this may include notice to affected users, the Federal Trade Commission, and, where required, other parties.
We maintain internal procedures for identifying, investigating, documenting, and responding to suspected unauthorized access, acquisition, disclosure, or misuse of consumer health information.
17) Data Processing and Storage Location
The Services are operated primarily from the United States.
Your data is processed and stored primarily within the United States using cloud infrastructure and third-party service providers.
By using the Services, you understand that your information may be processed and stored in the United States or other locations where our service providers operate, subject to applicable law and contractual protections.
18) Children’s Privacy
DoseStack is not intended for use by children under the age of 13, or under the age of 16 in the EEA/UK.
We do not knowingly collect personal information from children under the applicable age.
If we learn that we have collected personal information from a child under the applicable age, we will take steps to delete such information promptly.
If you believe a child has provided us with personal information, contact us at support@ourodysea.com.
19) Push Notifications
With your permission, we may send push notifications for dose reminders, subscription updates, service announcements, and app-related reminders.
You can manage notification preferences in your device settings at any time.
We do not intentionally include medication names, supplement names, dosages, symptoms, lab values, provider names, or other sensitive health details in push notification text.
Because push notifications may appear on your device lock screen or be visible to others with access to your device, you are responsible for managing your device notification settings.
20) Emails and Communications
We may send service-related emails or communications, including:
• Account verification
• Password reset
• Security alerts
• Subscription notices
• Support responses
• Privacy or policy updates
Do not send Social Security numbers, insurance identifiers, payment card numbers, government-issued IDs, or unnecessary sensitive personal information by email.
21) Third-Party Links and Services
The Services may contain links to third-party websites, apps, services, or resources.
We are not responsible for the privacy practices, content, security, policies, or data handling of third-party services that are not controlled by OurOdysea LLC.
We encourage you to review the privacy policies and terms of any third-party services you interact with.
22) Legal Requests and Compliance
We may access, preserve, or disclose information if we believe doing so is required or appropriate to:
• Comply with applicable law, regulation, legal process, or governmental request
• Enforce our Terms of Service
• Protect the rights, property, or safety of OurOdysea LLC, our users, or others
• Detect, prevent, or address fraud, abuse, security incidents, or technical issues
• Respond to user requests, disputes, or investigations
23) Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
When we make material changes, we will:
• Update the "Effective Date" at the top of this Privacy Policy
• Notify you through the app, email, or other reasonable means for significant changes
• Post the updated policy at our publicly accessible URL
If we make material retroactive changes to how we use or disclose personal information or consumer health information, we will provide notice and obtain consent where required by applicable law.
Your continued use of the Services after changes are posted constitutes acceptance of the updated Privacy Policy, except where additional consent is required by law.
24) Related Policies
You can access DoseStack’s related policies here:
Terms of Service:
https://www.dosestack.app/terms
Delete Account Policy:
https://www.dosestack.app/delete-account
25) Contact Information
OurOdysea LLC
1424 6th Street NE
Hickory, NC 28601
United States
Email: support@ourodysea.com
For privacy-specific inquiries, data access requests, deletion requests, complaints, or health data questions, email support@ourodysea.com with the subject line "Privacy Request."
For consumer health data requests, email support@ourodysea.com with the subject line "Consumer Health Data Request."