Privacy Policy

This policy explains how your personal data is processed through the Dosemio mobile app and the dosemio.com website. It also serves as our notice under Turkish Law No. 6698 (KVKK) and, where applicable, the GDPR.

1. Data controller

The data controller is Mandoo Studios (Mehmet Akif Sayım, Istanbul, Türkiye). Address: [address]. Contact: mandoostudiosofficial@gmail.com

2. What data we process

  • Account data: email address, name, and, if you sign in with Google, the basic profile information Google shares (name, email, profile ID).
  • Health data: the medicine and vitamin names you add, doses, reminder times, and records of doses you have taken.
  • Caregiver connections: invite codes and which accounts are linked to each other.
  • Device data: the Firebase Cloud Messaging (FCM) token used to deliver notifications.
  • Phone number: only if you choose to receive SMS alerts as a caregiver.
  • Subscription data: your purchase status. We never see your payment card details; the App Store/Google Play and RevenueCat handle them.
  • Feedback: messages you send us.
  • Website: server logs (IP address, browser information) are kept by our hosting provider. Your language preference is stored locally in your browser and is not sent to us.

3. Purposes and legal bases

  • Creating your account and operating the app (performance of a contract).
  • Sending medication reminders and missed-dose alerts (performance of a contract; explicit consent for health data).
  • Managing your subscription (performance of a contract, legal obligation).
  • Keeping the service secure and fixing bugs (legitimate interests).
  • Responding to your feedback (legitimate interests).

4. Health data and explicit consent

Medicine and dose information is special-category personal data under KVKK and the GDPR. We process it only with your explicit consent and only to provide the app's functionality. You can withdraw consent at any time by deleting your account or contacting us. Withdrawing consent may mean you can no longer use features that require health data.

Dosemio is not a medical device and does not give medical advice. Consult your doctor or pharmacist about decisions regarding your medication.

5. Caregiver sharing

If a caregiver links to you using your invite code, that caregiver can see your medication schedule and dose status. If you miss a dose, the caregiver may be alerted by push notification or SMS, depending on their own settings. You can remove the connection at any time.

6. Who we share data with

We do not sell your data or share it for advertising. We use the following service providers to run the service:

  • Supabase: database, authentication, and server functions.
  • Google (Firebase Cloud Messaging, Sign in with Google): notifications and sign-in.
  • RevenueCat: subscription and purchase management.
  • NetGSM: delivery of SMS alerts.
  • Vercel: website hosting.
  • Apple App Store and Google Play: app distribution and payments.

We may disclose data to authorities where legally required.

7. International transfers

Our service providers may operate servers outside Türkiye (and outside the EEA). Transfers are made under Article 9 of KVKK and applicable law, based on your explicit consent and/or appropriate safeguards such as standard contractual clauses.

8. Retention and deletion

We keep your data while your account is open. When you delete your account in the app, your account and the associated medicine, dose, and connection data are deleted. Records we are legally required to keep (for example, subscription transactions) may be retained for the legally required period.

9. Your rights

Under KVKK Article 11 and the GDPR, you have the right to:

  • Find out whether your data is processed and request information about it.
  • Learn the purposes of processing and whether data is used accordingly.
  • Know the third parties your data is transferred to, in Türkiye or abroad.
  • Request correction of incomplete or inaccurate data.
  • Request deletion or destruction of your data.
  • Object to processing and withdraw your consent.
  • Request data portability (GDPR).
  • Claim compensation if you suffer damage.

Send requests to mandoostudiosofficial@gmail.com. We respond within 30 days. You may also lodge a complaint with the Turkish Personal Data Protection Authority (KVKK) or your local supervisory authority.

10. Security

We take reasonable technical and organizational measures, including encrypted connections and access controls, to protect your data. No system can be guaranteed to be completely secure.

11. Children

Dosemio is not directed at people under 18. Parents or guardians who want to manage a child's medication should use the app through their own account.

12. Changes

We may update this policy. We will announce material changes in the app or on this page. The effective date at the top shows the current version.

13. Contact

Questions: mandoostudiosofficial@gmail.com