Privacy Policy

Last updated: June 16, 2026

This Privacy Policy describes how DoseVault, Inc. (“DoseVault”, “we”, “our”, or “us”) collects, uses, shares, and protects personal information when you use the public website at dosevault.ai, including its educational pages and free calculators (collectively, the “Site”).

DoseVault is an educational resource and a set of free peptide calculators. We are not a healthcare provider, do not prescribe, and do not provide medical advice. Nothing in this Policy is medical advice. See our Disclaimer for details on the educational nature of the Site.

The gist

The Site has no user accounts and stores no health data. The only personal data we collect is the email you submit to the early-access list and the details you send through the contact form, plus standard server logs and, with your consent, anonymized analytics. We do not sell your data or share it with advertisers.

The DoseVault app is currently in development and will be governed by its own Privacy Policy. EEA, UK, and California residents have additional rights described in Section 7.

1. Scope: this site, not the app

This Policy covers only the public website at dosevault.ai. The Site is a marketing and education surface with free calculators. It does not offer sign-in, user accounts, or a personal tracker, and it does not store dosing logs, bloodwork, or other health records.

The DoseVault tracker app is a separate product that is currently in development. When it launches it will have its own Privacy Policy and Terms that govern how it handles account and health data. This Policy does not describe the app.

2. Information we collect

2.1 Information you provide

Early-access email: if you join the early-access list, we collect your email address and optional signup metadata (an attribution source and a referral code, if present). We use this to notify you when the app launches and to manage list order.
Contact-form submissions: your name, email address, optional organization, and your message. We use this only to respond to your inquiry.

The free calculators run in your browser. The doses, weights, and other values you enter are processed client-side and are not transmitted to or stored on our servers.

2.2 Information we collect automatically

Device and log data: IP address, browser user-agent, device type, operating system, referring URL, pages visited, and timestamps. We retain this in server logs for up to 90 days for security, abuse detection, and debugging.
Cookies and similar technologies: see our Cookie Policy for the specific cookies we set and how to control them.
Product analytics: if you consent via the cookie banner, we collect anonymized event data (page-view, calculator-used) through our analytics provider. These events are not linked to your name or email.
Error telemetry: our error monitoring provider captures stack traces and client errors so we can fix bugs. We scrub request bodies, URL parameters, and form values from these reports.

3. Why we collect it

To run the early-access list: store your email so we can tell you when the app launches.
To respond to you: answer contact-form inquiries.
To send transactional email: our transactional email provider delivers early-access confirmations and forwards contact messages to our team.
To improve the Site: aggregate analytics and error reports help us prioritize fixes and new content.
To meet legal obligations: respond to lawful requests, enforce our Terms, prevent fraud and abuse.

We rely on the following GDPR Article 6 lawful bases: (a) consent for joining the early-access list and for non-essential analytics cookies; (b) legitimate interests for security logging, fraud prevention, responding to inquiries, and improving the Site; and (c) legal obligation for lawful-request compliance.

4. Subprocessors and sharing

We share your information with the categories of third-party processors listed below. Each is bound by a data-processing agreement that limits use of your data to providing services to DoseVault. A current list of specific subprocessors is available on request from privacy@dosevault.ai.

Category	Purpose	Region
Cloud database provider	Stores the early-access list (your email and signup metadata).	United States / European Union
Transactional email provider	Sends early-access confirmation messages and forwards contact-form submissions to our team.	United States
Web hosting and edge network	Web hosting, edge networking, and serverless function execution for the site.	Global edge network
Error monitoring provider	Error tracking and performance telemetry. We scrub personal information from stack traces before submission.	United States / European Union
Product analytics provider	Anonymized feature usage and funnel measurement. Loads only if you opt in via the cookie banner.	United States / European Union

We do notsell your personal information for money. We do not share your personal information with advertisers or data brokers. The only “sharing” that may meet the broad CCPA/CPRA definition of “sale” or “sharing” is the use of cookie-based analytics for cross-context behavioral analysis. You can opt out of this at any time via the cookie banner or the Cookie Policy page.

We may also disclose information when required by law, in response to a valid subpoena or court order, or to protect the rights, property, or safety of DoseVault, our users, or the public. We will notify affected users of legal-process disclosures unless prohibited by law.

5. International transfers

DoseVault is operated from the United States. If you access the Site from the European Economic Area, the United Kingdom, or Switzerland, your information will be transferred to and processed in the United States. Where required, we rely on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum to lawfully transfer personal data.

6. How long we keep your information

Early-access email: retained until the app launches and you have been notified, or until you ask us to remove you, whichever comes first.
Contact-form messages: retained in our email system only as long as needed to handle your inquiry and any follow-up.
Server logs: 90 days, then deleted.
Email-suppression records: if you ask not to be contacted, we keep a minimal record so we do not contact you again. This persists until you ask us to remove it.

7. Your rights

7.1 Rights for everyone

Access: request a copy of the personal information we hold about you. You can request this at any time by contacting us.
Correction: ask us to update inaccurate information by email.
Deletion: ask us to remove your email from the early-access list, or delete other information we hold, by emailing privacy@dosevault.ai.

7.2 GDPR / UK GDPR (EEA and UK residents)

In addition to the rights above, you may: object to processing based on legitimate interests, restrict processing, withdraw consent at any time (without affecting the lawfulness of prior processing), and lodge a complaint with your local supervisory authority. For users in Ireland, that is the Data Protection Commission (dataprotection.ie).

7.3 CCPA / CPRA (California residents)

California residents have the right to know what categories of personal information we collect, the categories of sources, the business purposes for collection, and the categories of third parties we share with. All of these are detailed in this Policy.

You also have the right to:

Opt out of “sale” or “sharing” of personal information for cross-context behavioral analysis. Use the “Necessary only” choice on our cookie banner. We honor Global Privacy Control (GPC) signals automatically.
Limit use of sensitive personal information. We do not collect sensitive personal information through the Site.
Non-discrimination: we will not deny you service, charge you different prices, or provide a different level of quality because you exercised your privacy rights.

To exercise any right, email privacy@dosevault.ai. We will verify your identity (typically by confirming control of the email address) and respond within 30 days for GDPR requests and 45 days for CCPA requests.

8. Children

DoseVault is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact privacy@dosevault.ai and we will delete it.

9. Security

We protect data with TLS in transit, least-privilege access to the early-access list, automated dependency-vulnerability scanning, and rate limiting on the form endpoints. Calculator inputs never leave your browser.

No system is perfectly secure. In the unlikely event of a breach affecting your information, we will notify you and the relevant supervisory authorities within the timelines required by law. For a fuller description of our controls, see our Security page.

10. Do Not Track and Global Privacy Control

We honor the Global Privacy Control (GPC) signal. If your browser sends GPC, we treat it as an opt-out of “sale” / “sharing” under CCPA/CPRA and disable non-essential analytics on that browser.

Because the Do Not Track standard was never finalized, we do not respond to generic DNT headers separately. GPC has equivalent or stronger effect on this Site.

11. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where required by law, notify you. Your continued use of the Site after the updated Policy takes effect constitutes acceptance of the changes.

12. Contact us

Privacy questions, rights requests, or complaints: privacy@dosevault.ai.

Questions? Contact privacy@dosevault.ai. Last updated: June 16, 2026.

Not medical advice

Information on DoseVault is for educational purposes only and is not a substitute for medical advice, diagnosis, or treatment from a qualified healthcare provider.