Effective 20 June 2026
Privacy Policy
Jagadose is a personal tracker for people on weekly metabolic-therapy regimens. This policy explains what we collect, why, where it is stored, and the rights you have over your data.
Who we are
Jagadose (“we”, “us”) operates this app. If you have a privacy question, email privacy@jagadose.com.
What we collect
Account. Your email address and (optionally) name, via our auth provider Clerk.
Health information you choose to log. Medication and dose entries, weight and other measurements, side-effect entries, treatment-plan details, height and baseline weight, and reminder preferences.
Pen-scan data. When you scan a pen barcode, we parse and store the GS1 identifiers (GTIN, lot, expiry, serial) you scanned.
Clinic submissions. Information you submit when listing a clinic in the directory.
Subscription status. If you buy Jagadose+, our payments processor RevenueCat records your purchase and renewal status against your account ID. We never see or store your card number — payment is handled entirely by the Apple App Store or Google Play.
Approximate location. The clinic directory uses a default city centre; we do not request device GPS.
Diagnostic data. We do not run third-party analytics, advertising SDKs, or tracking pixels.
How we use it
We use what you log only to operate the app: to show you your data, schedule your on-device reminders, generate the PDF report you choose to share, and surface the clinic directory. We do not sell, share for advertising, or use your health data to train AI models.
AI features (Jagadose+)
Two optional, Plus-only features use AI and run only when you choose to use them. These requests are not used for advertising, and we do not use your data to train our own models. If you don't use these features, none of this data is sent for AI processing.
Insights. When you tap to generate or refresh an insight, a summary of your logged data — treatment plan, recent doses, weight trend, and side-effect entries — is sent to our AI provider OpenRouter, which routes it to OpenAI's GPT models, to produce that insight. It is cached on your account until you refresh it.
Assistant (“JD”). When you send the assistant a typed message, that message plus a summary of your active medications, doses, and units is sent to the same provider to understand your request (for example, to pre-fill a dose to log). Any logging action is carried out only after you confirm it.
Voice input. When you use the assistant's push-to-talk, your speech is transcribed by your phone's built-in speech recognition. Depending on your device, that may send the audio to your device's speech provider (for example, Google) to convert it to text. We do not record or store the audio ourselves — only the resulting text is processed, exactly like a message you type. You can always type instead of using voice.
Where your data is stored
Account and app data are processed by Clerk (sign-in) and Convex (backend), both with servers in the United States. By signing in you consent to your data being transferred to and processed in the United States. We may relocate processing to a regional provider in the future.
Service providers. We rely on a small set of processors, all US-based: Clerk (authentication), Convex (backend storage), RevenueCat (subscription status — no card data), and, only when you use the AI insights or assistant features, OpenRouter and OpenAI (AI processing). Each receives only the data needed for its function.
On-device data (reminder schedules, app-lock preference, cached session) stays on your phone, in Expo's secure storage.
How long we keep it
We keep your data until you delete your account from the Account screen. Deleting your account erases your profile, doses, weight, side-effect history, pen records, treatment plan, clinic submissions you authored, and your sign-in.
Your rights
Depending on where you live (including under Malaysia's PDPA and the EU/UK GDPR), you may have the right to access, correct, port, restrict, or erase your data, and to withdraw consent or complain to a supervisory authority. You can:
• Access & portability: tap “Share report for your doctor (PDF)” on the Account screen.
• Erasure: tap “Delete account” on the Account screen.
• Other rights: email privacy@jagadose.com and we will respond within 30 days.
Security
All network traffic uses TLS. The app supports optional biometric app-lock. Convex and Clerk operate ISO-aligned production environments. No system is perfectly secure; please use a strong account password.
Children
Jagadose is not intended for users under 18. Do not use the app if you are under 18.
Not medical advice
Jagadose is a personal tracker. It does not provide medical advice, diagnosis, or treatment, and is not a substitute for your clinician. Always follow your prescribing clinician's guidance.
Changes to this policy
We may update this policy. The “Effective” date at the top will change, and we will surface material changes in-app before they take effect.