Privacy Policy — DoseHandoff

Last updated: June 11, 2026 Effective date: June 11, 2026

This Privacy Policy explains how Evgenii Doronin ("DoseHandoff," "we," "us," or "our") collects, uses, discloses, and protects information when you use the DoseHandoff mobile app, the sitter web link, and related services (the "App"). By using the App, you agree to this Privacy Policy.

DoseHandoff is a pet medication tracker for animals, not humans. It is a tool for owner-entered pet medication schedules and dose logs. It is not a veterinary service, medical device, emergency service, or a substitute for professional veterinary advice (see our Terms of Service and Veterinary & Safety Disclaimer).

• Contact: hello [at] dosehandoff.com
• Website / policy URL: https://dosehandoff.com/privacy
• For GDPR purposes, the data controller is Evgenii Doronin, Spain.

1. Information we collect

We collect only what we need to run the App.

a) Account and sign-in information. We use Firebase Authentication with Sign in with Apple and Google Sign-In. We may receive and store: your Firebase user ID; your email address (including an Apple private relay address if you use one); your display name and the provider you used to sign in; and sign-in metadata needed to keep your account secure. We do not offer email/password accounts and do not handle passwords.

b) Pet care information you enter. Pet name, species, optional age label, notes, and an optional pet photo; medication or supplement name, dose notes, schedule, and reminder settings; dose log entries (given/skipped status, timestamp, notes, and who marked the dose). Please do not enter human medical information. If you put personal information in free-text fields, we will process it as part of the service.

c) Household and sharing information. If you invite a caregiver, we store the email address you provide for that invitation, plus membership roles. If you create a sitter link, we store the link label, token hash, status, allowed pets, expiry window, and dose actions taken through the link. Raw sitter tokens are shown once and are not stored in readable form.

d) Device, diagnostics, and notifications. Device platform, app version, Firebase installation identifiers, FCM push token, notification permission state, and a per-install device ID; crash reports, logs, and crash context (such as plan, role, and user ID) via Firebase Crashlytics; and device attestation data (Firebase App Check) to protect the service from abuse.

e) Usage analytics. Aggregated, event-level usage data via Firebase Analytics (for example: onboarding, paywall views, purchase completion, restore, invite/sitter-link creation, dose marked, export started/completed, account deletion). Our analytics interface is designed not to send pet names, medication names, emails, or notes to Analytics.

f) Purchases and subscription information. Your subscription and lifetime-purchase status via RevenueCat (product type, store, RevenueCat user ID, entitlement status, renewal/trial/expiration status, webhook metadata). Payments are processed by Apple or Google. We do not collect or store your payment card details.

We do NOT collect: human health information, payment card numbers, precise geolocation, or advertising identifiers. We do not use third-party advertising networks and do not sell your personal information.

2. How we use information

• Create and authenticate your account.
• Provide shared pet medication tracking, dose history, reminders, exports, caregiver access, and sitter links, and sync them across household members and devices.
• Enforce roles, security rules, subscription entitlements, Free-tier limits, and trial/lifetime state.
• Send reminders and notifications you have enabled.
• Provide support and respond to privacy requests.
• Diagnose crashes, maintain security, prevent abuse, and improve reliability.
• Comply with legal, tax/accounting, and app-store obligations, and enforce our Terms.

We do not sell personal information and do not use pet medication entries for targeted advertising.

3. Legal bases (EEA / UK)

Where the GDPR or UK GDPR applies, our legal bases are:

• Contract — to provide the App, account, household sharing, reminders, exports, subscriptions, and support.
• Legitimate interests — to secure the service, prevent abuse, debug crashes, and understand non-sensitive product usage.
• Consent — where required, e.g. for notifications and optional device permissions.
• Legal obligation — to comply with law, tax/accounting, and valid legal requests.

Pet medication data is about animals. If you enter personal information about a person in notes, that information may be personal data.

4. How we share information

We share data only with service providers ("processors") that help us run the App, and only as needed:

Household members can see shared household data according to their role. Sitters with a valid temporary link can see and mark only the pets and doses that link allows.

We require these providers to protect your data in a manner consistent with this policy and applicable law. We may disclose information if required by law, to protect rights and safety, to prevent fraud or abuse, or as part of a business transfer (merger, acquisition, or sale of assets).

5. International transfers

We are based in Spain. Our providers may process data in the United States, Canada, the EEA, and elsewhere. Where data is transferred out of the EEA, UK, or Canada, it is protected by appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or provider data-processing terms.

6. Retention and deletion

We keep your data while your account or household is active, and as needed to comply with law, resolve disputes, enforce agreements, and maintain backups.

You can delete your account at any time in the App (Settings → Account → Delete account). This permanently removes your data. If you are a household Owner, deletion removes the household and its shared pet care records. If you are a Caregiver, deleting your account removes you from the household, though historical dose entries may remain attributed by display name or role for record integrity.

You can also email hello [at] dosehandoff.com to request access, correction, export, or deletion. We will respond within the time required by applicable law and may verify your identity first.

7. Your privacy rights

Depending on where you live, you may have the right to: access or receive a copy of your data; correct inaccurate data; delete your data; export/port your data (the App provides CSV export); object to or restrict certain processing; withdraw consent; opt out of sale, sharing, or targeted advertising (we do none of these); and appeal a denied request where state law provides an appeal right.

• California (CCPA/CPRA): the rights above, and the right not to be discriminated against for exercising them.
• Other U.S. states (Virginia, Colorado, Connecticut, Texas, Utah, and others): access, correction, deletion, portability, opt-out, and appeal. We collect the categories described in Section 1, disclose them only to the processors in Section 4, and do not sell personal data or share it for cross-context behavioral advertising.
• Canada (PIPEDA / Quebec Law 25): access and correction, meaningful consent, and a contact for privacy questions.
• EU / UK (GDPR): the rights above, plus the right to lodge a complaint with your local data protection authority.

To exercise any right, use the in-app controls or email hello [at] dosehandoff.com. For appeals, reply to our decision or email us with "Privacy Appeal" in the subject line.

8. Children

DoseHandoff is not directed to children. You must be at least 18 (or the age of majority where you live) to create an account or make a purchase. We do not knowingly collect data from children under 13 (or under 16 in the EEA). If you believe a child provided us with data, contact hello [at] dosehandoff.com and we will delete it.

9. Security

We use Firebase Authentication, Firestore Security Rules, server-side authorization checks, hashed sitter tokens, Firebase App Check, and provider security controls. No system is 100% secure. You are responsible for protecting your devices, sign-in credentials, and any sitter links you share.

10. Notifications

The App may send reminders and push notifications if you choose to enable them. Notifications are reminders and factual updates only — they are not emergency alerts, veterinary advice, or a guarantee that a dose should or should not be given. You can manage them in the App and in your device settings.

11. Changes to this policy

We may update this Privacy Policy. We will post the updated version at the URL above, revise the "Last updated" date, and, for material changes, provide notice in the App. Continued use after changes means you accept the updated policy.

12. Contact

Evgenii Doronin Email: hello [at] dosehandoff.com