Privacy Policy

Last updated: 7 August 2026 · applies to Dozed 1.6

Dozed is a logbook for GLP-1 treatment. Privacy is not a setting in the app — it follows from how the app is built: there is no server. There is no account to create, nothing to sign in to, and no place at the developer where your data could end up.

What the app stores

What you log yourself:

• Injections and skipped doses — medication, dose, time, injection site, note
• Dose schedule, titration plan and reminder settings
• Weight, body fat, lean body mass, waist measurements and height
• Side effects and appetite ratings
• Pens — size, number of doses, lot number and expiry date
• Progress photos, if you add any
• Your profile: chosen medication, starting and goal weight, units

Where the data lives

Everything is stored locally on your device. If you are signed in to iCloud it is mirrored to your private iCloud database, which only you can reach. That is Apple's infrastructure, not the developer's: the developer cannot read your data, and there is no technical route to it.

One exception runs the other way: weights and body measurements imported from Apple Health are stored in a separate, entirely local database that is never mirrored to iCloud. This is required by Apple's guidelines (5.1.3(ii)) and means health data imported from Health stays on the device that imported it.

Apple Health

Health syncing is off until you turn it on in Profile → Apple Health, and iOS asks you separately about each data type. If you turn it on:

• The app reads weight, body fat percentage, lean body mass, height and step count.
• The app writes back the weight, body fat and waist measurements you log in Dozed.

Nothing is read or written before you give permission, and you can withdraw it at any time in Settings → Apps → Health.

Progress photos

Pictures are chosen with the system photo picker, which runs in its own process. The app therefore never gains access to your photo library — it only ever sees the pictures you explicitly pick. They are stored like all other data: locally and in your private iCloud database, and they are not sent anywhere else.

You can lock them behind Face ID or your device passcode (Profile → Your data). That is the app's only use of Face ID, and the authentication is performed by iOS — the app is only told whether it succeeded.

Notifications

Reminders are scheduled locally on your device. There is no push server, and so nothing that sends your dose time anywhere.

Contacting us

If you send a message via Profile → About Dozed → Contact us, three things leave your phone, and only then: the text you wrote, the type (question, suggestion or problem) and one line containing the app version, iOS version and phone model. That line is shown on screen before you press Send, so nothing travels along in secret.

No health data, no medication, no weights and no identifier of any kind is sent — and the message cannot be linked back to you unless you write who you are yourself. That also means we cannot reply to a message that contains no way to reach you.

Messages are stored with Supabase, who run the database for us. This is the app's only outgoing request and it never happens automatically. If you would rather email, that works just as well: admin@noffan.cloud.

What the app does not do

• No accounts, no sign-in, no email collection
• No data is sent automatically to the developer or to any third party — only what you send yourself via Contact us, described above
• No tracking, no advertising, no analytics or measurement tools
• No third-party libraries that collect anything — the app uses only Apple's own frameworks

Purchases

Dozed Premium is handled by Apple through the App Store. Payment details never pass through the app, and the developer sees only Apple's anonymised sales reports — never who bought.

Diagnostics

The app can summarise crashes and hangs locally (using Apple's MetricKit) so you can read them in Profile → About Dozed. Nothing is sent automatically. To share a report you have to press Share and choose a recipient yourself.

Your control

• Export: Profile → Your data → Export data (CSV). The whole log, in a format you can open anywhere.
• Delete: Profile → Maintenance → Delete all data. Removes everything, including from iCloud.
• Remove entirely: delete the app and its iCloud data via Settings → Apple Account → iCloud → Manage Storage.

Children

Dozed is not directed at children under 13 and does not knowingly collect information from them. The app does not collect information about anyone.

Changes

If this policy changes, the date at the top is updated. Since the app has no account, there is no way to notify you directly — the date here is therefore the only source.

Contact

Questions about this policy: admin@noffan.cloud