FamilyDoseFamilyDose Consumer Health Data Privacy Policy
Beta version. This document has not been reviewed by a lawyer.
Version 2.0
Date: 2026-11-03
What changed in this version
- The operator is now Primelink Digital Online Seller, a sole establishment licensed in Dubai.
- Written for the US state consumer health data laws (Washington, Nevada and Connecticut among them), with consent to collect and a separate consent to share.
- The service providers are named here, the same list as the Privacy Policy and the Subprocessors page.
- Where health data is stored (Japan, Tokyo) and processed (the United States).
- How to use your rights, how fast we answer, and how to appeal.
About this policy
This is a separate policy about consumer health data only. It sits beside our Privacy Policy, which covers all personal data and every region. US state laws such as Washington's My Health My Data Act, Nevada's consumer health data law (SB 370) and Connecticut's Data Privacy Act ask for a stand-alone policy like this one, linked from our homepage. It applies to everyone who uses FamilyDose, wherever they live.
FamilyDose is operated by Primelink Digital Online Seller, a sole establishment licensed by the Department of Economy and Tourism, Dubai, licence no. 1603034, P.O. Box 48800, Dubai, United Arab Emirates ("we", "us"). Contact: support@familydose.app.
FamilyDose is a record-keeping and reminder tool that holds family health information. It is not a clinical service and it is not a medical device. It does not diagnose, treat, prescribe, advise, or tell anyone what or how much to give. Reminders follow the schedule the user sets and can be delayed or fail.
Words such as household, Admin, member, patient, care card link and service provider mean the same here as in the Privacy Policy.
1. Consumer health data we collect
| Category | What it includes |
|---|---|
| Medicines | Name, dose, route, category, schedule, notes, any diagnosis you enter, stock counts, paused or finished status, and the history of changes |
| Doses | When a dose was marked given, skipped or snoozed, including as-needed doses, and who logged it |
| Symptoms and temperatures | Temperature, severity, tags, notes |
| Health profile | Date and time of birth, sex, blood type, allergies, known conditions, diet notes |
| Vaccinations | Vaccine, dose number, date, next due date, lot number, doctor, clinic |
| Growth | Height, weight, date and notes |
| Appointments | Reason, date and time, provider, location, notes |
| Documents and photos | Files you upload, such as prescriptions, medical records and vaccination records, and the insurance card images |
| Scans | Photos you scan, the text read from them, and the details picked out |
| Care card contents | Allergies and what to do, conditions, medicines, diet, blood type, emergency contacts, insurance details |
| Notification content | Health details inside reminders and alerts, such as a patient's first name, a medicine and dose, or a temperature |
| Information worked out from the above | Which scheduled doses are due or not logged, summaries and charts |
| Usage events about health features | A record that a health feature was used, for example that a dose was logged, with your user ID. Not what was entered. Only if the usage data switch is on. |
We do not collect precise location, and we do not use geofences around health care places.
2. Why we collect each category
| Category | Purpose |
|---|---|
| Medicines | To keep the household's list of medicines and to send the reminders you set |
| Doses | To keep a record of what was given, when and by whom, and to alert you when a scheduled dose is not logged |
| Symptoms and temperatures | To keep them beside the dose record, and to send the optional temperature alert at a temperature you set |
| Health profile | To keep key facts in one place and show them on the care card if you choose |
| Vaccinations | To keep a record of what you enter |
| Growth | To chart height and weight beside the WHO reference curves, for information only, not a diagnosis |
| Appointments | To show them in the calendar and remind you |
| Documents and photos | To keep a patient's paperwork in one place |
| Scans | To fill in fields for you to check, and to measure how accurate the reading was |
| Care card contents | To let you share chosen details as a PDF or a link |
| Notification content | So a reminder says which patient and medicine it is about, unless you hide medicine names |
| Information worked out | To show reminders, alerts, summaries and charts |
| Usage events | To understand which features are used and which need fixing |
We use consumer health data only for the records and reminders your family sets. We do not use it for advertising. We do not sell it, and we never will without a signed authorisation from you, which we do not ask for.
3. Where consumer health data comes from
- From you and the members of your household, entered in the app or uploaded as files.
- From scans you choose to make. A scan is read on your phone. If you turn on "Closer reading" (its own consent), a prescription photo can also be read by OpenAI in the United States. You check every field before anything is saved.
- Worked out by the app from what your household entered, such as the next scheduled time, which comes only from the interval you set.
We do not get health data about you from data brokers, clinics, pharmacies, insurers or any other outside source.
4. Consent to collect and consent to share
- Consent to collect. Before any health information is stored, the app asks for your explicit consent to keep it, separately from the Terms. For each child, the parent or legal guardian gives their own consent first.
- Consent to share. Sharing outside your household happens only when you choose it: a care card link (you confirm each time), email notifications (you turn them on, with their own consent), or a prescription photo sent for a closer reading (its own consent).
- Service providers. We use the service providers listed in section 6 to run FamilyDose. They process data only to provide their service to us. Your separate consent to storage in Japan and processing by these providers is asked at sign-up.
Each consent is recorded with its version, the exact text shown and the time. You can withdraw any of them at any time (section 7).
5. How consumer health data is shared
Consumer health data is shared only in these ways:
- With members of your household, according to the access the Admin has given each of them.
- With people you choose. Anyone who has a care card link can see the sections you chose, until the link ends or you revoke it. A PDF or export goes wherever you send it.
- Through the channels you turn on. Push notifications pass through Expo and Apple. Emails pass through Resend.
- With our service providers, only so they can provide their service to us (section 6).
- With our staff, who can view household records through an admin dashboard that needs a second factor, only to answer a request, investigate a fault or a security problem, or where the law requires it.
- With authorities, only where a law we are subject to requires it.
We have no affiliates that receive consumer health data. [CONFIRM: no affiliates]
6. Service providers that can receive consumer health data
We use the service providers listed here to run FamilyDose. They process data only to provide their service to us. The full list, including the providers that receive no health data, is in the Privacy Policy (section 9) and on the Subprocessors page.
Health data is stored in Japan (Tokyo) by Supabase on Amazon Web Services. Some of it is processed in the United States.
| Service provider | What health data it can receive | Where |
|---|---|---|
| Supabase (on Amazon Web Services) | All of it. It is our database, sign-in, file storage and server functions. | Japan (Tokyo) |
| Resend | The words of emails, which can include a patient's first name, medicine names and temperatures, unless you hide medicine names in email | United States |
| Expo push service, then Apple Push Notification service | The words of push notifications, unless you hide medicine names in push | United States (Expo); Apple worldwide |
| OpenAI | A prescription photo, only after you turn on "Closer reading" | United States |
| US National Library of Medicine (Clinical Tables, RxTerms) | The letters typed into the medicine name box, with no account, person or household data | United States |
| Vercel | A shared care card, when someone opens its link; what staff view in the admin dashboard | United States and edge locations |
| Zoho Mail | Anything you write to our support or privacy mailbox | Zoho region of the mailbox [CONFIRM: the Zoho data centre, from the Zoho account settings] |
| Apple | No health data (sign-in and purchases only) | Worldwide |
| Sentry (Functional Software Inc.) | No health data: error reports are scrubbed of names, emails and medicine words | United States |
| Healthchecks.io | No user data | European Union |
7. Your rights
You can:
- confirm whether we collect, share or sell your consumer health data, and see a list of everyone we share it with;
- get a copy of it;
- withdraw consent to collect or to share;
- delete it.
In the app
| What you want | Where |
|---|---|
| A full copy | Settings, Data and privacy, Export my data |
| Stop usage events | Settings, Data and privacy, Share usage data |
| Stop closer reading | Settings, Data and privacy, Closer reading with OpenAI |
| Stop email delivery, or hide medicine names | Settings, Notifications |
| Stop a care card link | Revoke the link from the patient's care card |
| Withdraw the health information consent | Settings, Data and privacy |
| Withdraw the guardian consent for a child | Settings, Data and privacy, Privacy and consents |
| Delete your account | Settings, Data and privacy, Delete account |
Deleting your account
Deletion is immediate and permanent. If you are the only member of your household, the household and all of its health data, including stored files, are deleted with it. If the household is shared, entries you made stay in its history for the other members, shown without your name. [CONFIRM: label shown in the app] The delete screen offers to delete your own patient profile as well. Backups roll off after 7 days. When you delete data, we also tell our service providers to delete it where they hold a copy.
If you no longer have the app, ask for deletion on the web at https://familydose.app/support#delete-account: email privacy@familydose.app from your account's email address, and we confirm and delete the account within 30 days.
Deleting one patient's data
The Admin can remove a patient from the household. That hides the patient and their records from everyone and from every link, and the Admin can restore them. To have a removed patient's data permanently deleted, the Admin can write to privacy@familydose.app. [CONFIRM: whether permanent deletion of one patient is available in the app at publication]
A single dose, as-needed dose or symptom that a member deletes is hidden at once and permanently deleted after 30 days.
By email
Write to privacy@familydose.app. If you are a patient in someone else's household and do not have an account, you can still write to us. We check that the request comes from you or from someone allowed to act for you, and we never ask for your password.
We answer within 30 days, and never later than the 45 days these state laws allow. If we need more time, we tell you why within the first 30 days. We do not charge for a request, and we never treat you differently for using your rights.
Appeal
If we refuse a request, we tell you why. You can appeal by writing to privacy@familydose.app with "Appeal" in the subject. We answer an appeal within 45 days and tell you what we decided and why. If you are not satisfied, you can contact your state attorney general, such as the Washington State Attorney General.
8. Breaches
If a breach affects your consumer health data, we tell you and the authorities as each law requires, without undue delay. Under the FTC Health Breach Notification Rule we notify affected people, the Federal Trade Commission and, where the rule requires, the media, no later than 60 calendar days after we discover the breach.
9. Contact
Primelink Digital Online Seller, a sole establishment licensed by the Department of Economy and Tourism, Dubai, licence no. 1603034, P.O. Box 48800, Dubai, United Arab Emirates. Privacy requests: privacy@familydose.app