Privacy notice
Last updated: 26 October 2026
Who we are
Dose Diary is run by Daryl Bleach, trading as Dose Diary. We are the “controller” of your personal information, which means we decide how it is used and we are responsible for looking after it.
- Name: Daryl Bleach
- Email: hello@getdosediary.com
The short version
- Your diary is private. We use it only to run Dose Diary for you.
- We never sell it, never share it for advertising, and have no adverts, tracking pixels or third-party analytics.
- Your health information is encrypted with a key that belongs to your account alone.
- You can download everything at any time, and delete your account whenever you like.
What we collect
Your account: your name, email address and password. We keep only a scrambled version of your password, never the password itself. If you use Face ID or a fingerprint, the passkey stays on your phone, and we keep only its public part. If you change your email address, we send a code and a link to the new address, and tell your old address once the change is made. After that we keep only the new address.
When you choose a password, we check it hasn’t appeared in a known data leak. We send Have I Been Pwned only the first 5 characters of a scrambled version of it. Your password and email address are never sent.
Your diary, which includes information about your health:
- medicines, doses, when you take them, supply, photos of medicine boxes;
- check-ins: mood, pain, energy, appetite, sleep, toilet, water and notes;
- symptoms and side effects, measurements (such as blood pressure and weight), voice notes and their text;
- appointments, summaries, questions for your doctor and what the doctor said;
- documents you add, such as clinic letters, test results and discharge notes, with their title, who they are from, your notes and any text your phone read from them. Your phone reads the text itself. Nothing reads, interprets or flags what a document says;
- your “About me” card: allergies, conditions, GP, pharmacy, NHS number and next of kin;
- if you connect them: daily figures from Apple Health (sleep, heart rate, steps, oxygen), and appointments from On The Day.
Helpers: if you invite family or friends to help, we keep their name as you typed it, what you let them do, and a log of what they looked at.
Payments: if you pay on the website, Stripe handles your card. We receive only whether your subscription is active and when it renews. We never see your card number.
If you subscribe in the iPhone app, Apple takes the payment under its own privacy policy. Apple sends us the purchase’s transaction number, which plan it is, when it was bought, when it ends, whether it will renew, and any refund. We give your account a random code that the purchase carries, so we can match it to you. We never receive your Apple Account details, your name or your card.
Technical information: to keep you signed in we keep a record of each signed-in device, with the browser type. We keep short-lived security logs, including IP addresses, to stop attacks such as password guessing. We don’t use cookies for anything except keeping you signed in.
Why we use it, and our lawful basis
| What | Why | Lawful basis (UK GDPR) |
|---|---|---|
| Account details | To create and run your account | Contract (Article 6(1)(b)) |
| Health information in your diary | To keep your diary, send your reminders, and make your summaries | Contract (Article 6(1)(b)), and your explicit consent for health information (Article 9(2)(a)) |
| Helpers’ access | To share only what you choose | Your explicit consent, which you give to each helper and can withdraw at any time |
| Payments | To take subscriptions on the website, and to unlock what you paid for in the App Store | Contract (Article 6(1)(b)) and legal obligation for tax records (Article 6(1)(c)) |
| Security logs | To protect accounts and the service | Legitimate interests (Article 6(1)(f)) |
| Service emails | Confirming your email, resetting your password, telling you a trial is ending | Contract (Article 6(1)(b)) |
We ask for your explicit consent to keep information about your health when you sign up, and we record when you gave it. You can withdraw it at any time in Settings. Your diary is then paused (nothing new is kept), and you can still download or delete everything.
We never use your information for advertising, marketing to others, profiling, or training AI. We don’t make automated decisions about you. Patterns and the side-effect watch are calculations on your own diary, shown only to you. They are not decisions about you.
Who we share it with
We share information only with the companies that help us run the service (“processors”). They act on our instructions and under a contract:
- Cloudflare hosts the app, the database and file storage, sends emails and transcribes voice notes (its AI runs inside Cloudflare). Data is stored in Western Europe.
- Stripe takes payments on the website, if you pay there. It receives your email address only.
- On The Day, only if you choose to connect it: we receive your upcoming hospital appointments, and send a summary only when you choose to attach one.
If you subscribe in the iPhone app, Apple runs that purchase as its own business, not on our instructions. We send Apple nothing about your diary.
We never sell or rent your information, and we have no partnerships with drug companies.
We may have to share information if the law requires it, for example a court order. We would tell you unless we are not allowed to.
Where it is kept
Your diary is stored in Cloudflare’s Western Europe region. Cloudflare’s network is worldwide, so information can pass through other countries on its way to you. Where that happens, it is protected by the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.
How long we keep it
- Your diary: for as long as you have an account.
- When you delete a document or a voice note, the file and what it says are deleted straight away. We keep only a blank entry with its date. A deleted medicine box photo is deleted straight away.
- Email change codes and links stop working once used or after they run out, and are cleared soon after.
- When you delete your account, everything is deleted straight away, including the key that unlocks your data. Our nightly backups are encrypted, and copies of your information in them can no longer be read once your key is gone. The backups themselves are removed within 30 days.
- If your free trial ends without a plan, or you stop paying, nothing is deleted. Dose Diary is locked until you choose a plan, and you can still download or delete your data at any time.
- Security logs: up to 30 days.
- Payment records: Stripe and Apple keep their own records for as long as the law requires (usually 6 years for tax). Our record of your subscription is deleted with your account.
How we protect it
See our plain-English page, How we protect your data.
Your rights
You have the right to:
- see your information: download everything from Settings, at any time;
- correct it: edit anything in the app;
- delete it: Settings, then Delete my account;
- take it elsewhere: the download is in common formats (JSON and spreadsheets);
- withdraw consent: Settings, then Withdraw permission;
- object or ask us to restrict how we use it.
Email hello@getdosediary.com for anything you can’t do in the app. We will reply within one month.
Children
Dose Diary is for adults, and for people aged 13 and over with the help of a parent or carer. It is not for children under 13 to use on their own. If you think a child under 13 has made an account, email hello@getdosediary.com and we will delete it.
Complaints
If you’re unhappy with how we’ve used your information, please tell us first at hello@getdosediary.com. You can also complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, or call 0303 123 1113.
Changes
If we change this notice, we will show the new version here. If the change affects how we use your health information, we will ask for your consent again.