This Privacy Policy describes how PT Solusi Tumbuh Bersama ("we," "us," or "Dosei") handles information when you use the Dosei mobile application (the "App"). Please read it carefully — it explains what we collect, how we use it, and the choices you have.
Dosei is operated by:
PT Solusi Tumbuh BersamaFor privacy questions or requests: privacy@dosei.online
In plain terms:
By default, Dosei stores the following information locally on your device, in storage controlled by the iOS operating system. We have no access to this data unless you enable cloud backup.
If you enable Cloud Backup, we collect and store the following:
Cloud Backup is opt-in. You can disable it at any time. You can also permanently delete your backup data — see Section 9.
We collect data about how you use the App to understand product engagement, improve features, measure marketing effectiveness, and run re-engagement campaigns. This data is linked to your email address and a device identifier.
We collect:
User identifiers
Event data
Technical data
We never collect in analytics:
In short: we see that you used a feature, but never what medication content you have.
If you enable Cloud Backup and consent to marketing communications, we may send you:
You can unsubscribe or disable these at any time:
Marketing communications are separate from transactional messages (authentication codes, payment receipts, security alerts) which you cannot disable while using Cloud Backup.
When you install Dosei from a marketing campaign, we may receive attribution data through Apple's App Store APIs (App Store Connect Campaign URLs and SKAdNetwork) to understand which marketing channels drive App installs and conversions.
We do not use third-party advertising identifiers (IDFA) without prompting you for App Tracking Transparency consent. If we ever ask for IDFA permission, you can decline without affecting App functionality.
Used for two purposes:
You can manage both in App → Profile → Notifications, and in iOS Settings.
Used only if you enable Calendar Sync. With your permission, Dosei writes medication schedule events to a calendar you select. You can revoke this permission at any time in iOS Settings.
When Calendar Sync is enabled:
Calendar data is written to your iOS Calendar locally — Dosei does not store calendar events on our servers.
Used only when you choose to scan a vial label. Images are processed in real time on your device to read barcode or label text. We do not store or transmit camera images. Only the scanned text becomes part of your local vial record.
We use third-party services to operate Dosei. Each is listed below with what data they receive.
Service provider: Supabase, Inc.
Purpose: Hosts the cloud backup database and authentication.
Data shared: Email address, OTP authentication tokens, and all data described in Section 3.2.
Privacy policy: https://supabase.com/privacy
Supabase processes data on our behalf as a data processor.
Service provider: Resend, Inc.
Purpose: Sends authentication codes, transactional emails, and (with consent) marketing communications.
Data shared: Email address, message content, delivery metadata.
Privacy policy: https://resend.com/legal/privacy-policy
Service provider: [TO BE SPECIFIED — see /privacy/analytics]
Purpose: Product usage analytics and user engagement measurement.
Data shared: All data described in Section 3.3 (email, device ID, event data, technical data).
The current analytics provider is listed at https://dosei.online/privacy/analytics. If we change providers, that page is updated.
Service provider: Apple Inc.
Purpose: App Store distribution, push notification routing (APNs), iOS Calendar integration, and marketing attribution.
Privacy policy: https://www.apple.com/legal/privacy/
We do not receive your Apple ID or App Store payment information.
We do not use:
We use the data described in Section 3 to:
We do not use your data for:
If you are in a region with data protection laws that require a legal basis (such as the EU, UK, or Indonesia under the PDP Law), our basis is:
You may withdraw consent at any time by:
Withdrawing consent does not affect data already processed lawfully before withdrawal.
Data stored on your device is protected by iOS-level encryption and your device's security (passcode, Face ID, Touch ID).
Data sent to our servers is:
Database administrators have technical access for maintenance and security purposes only, governed by internal access controls.
No system is 100 percent secure. We take reasonable precautions but cannot guarantee absolute security. If we become aware of a security incident affecting your data, we will notify you in accordance with applicable law.
Depending on your jurisdiction, you may have the following rights. We honor these rights regardless of jurisdiction where reasonable.
All your medication data is accessible in the App. For a copy of analytics or other data we hold about you, email privacy@dosei.online.
You can edit any medication, dose, or profile record directly in the App. To correct other data we hold (such as email address), email privacy@dosei.online.
To delete data:
You can opt out of marketing emails by:
Opting out of marketing does not affect transactional messages (authentication codes, security alerts).
You can disable usage analytics in App → Profile → Privacy → Disable analytics.
Disabling analytics stops collection going forward but does not delete historical data. To delete historical analytics, contact privacy@dosei.online.
You can revoke iOS permissions (calendar, notifications, camera) at any time in iOS Settings.
You have the right to object to processing based on legitimate interests. Contact privacy@dosei.online with your objection.
If you believe we have mishandled your data, please contact us first at privacy@dosei.online. You also have the right to complain to your local data protection authority. In Indonesia, this is the Ministry of Communication and Informatics (Kominfo).
Dosei is designed for users 13 and older. We do not knowingly collect data from children under 13 without verified parental involvement. If you believe a child has provided us with personal data, contact privacy@dosei.online and we will delete the data promptly.
For users between 13 and the age of majority in their jurisdiction, we recommend parental involvement.
Our infrastructure providers (Supabase, Resend, analytics provider, Apple) may store and process data in jurisdictions outside Indonesia, including the United States and European Union. We rely on the providers' standard contractual clauses and security frameworks to protect your data during international transfer.
By using Cloud Backup, you consent to your data being processed in these jurisdictions.
If you delete your account, we delete your cloud backup data and identifiable analytics data within 30 days. Aggregated analytics (which cannot identify you) may be retained indefinitely.
Dosei subscriptions (Pro and Family) are processed through Apple's App Store. We do not receive your credit card information, billing address, or payment details. Apple shares with us only your subscription status (active or inactive) and the plan you purchased.
For Apple's privacy practices, see https://www.apple.com/legal/privacy/
We may update this Privacy Policy from time to time. When we make material changes, we will:
We encourage you to review this policy periodically.
For privacy questions, data requests, or complaints:
PT Solusi Tumbuh BersamaWe aim to respond to all privacy inquiries within 14 business days.