Privacy Policy

Last updated: July 8, 2026

Dose'D LLC ("Dose'd," "we," "our," or "us") is committed to protecting your privacy. This Policy explains how we collect, use, disclose, and safeguard your information when you use our website and mobile applications (the "Service"). It applies to all users, including consumers and business/brand accounts.

In short: we collect what we need to run the Service, verify that you are 21+, and connect consumers with sellers. We share data with the service providers that operate our platform. We do not sell your personal information.

1. Information You Provide

Account: email address, a securely hashed password (we never store plain-text passwords), date of birth (to verify you are 21+), and a public handle or display name. Optionally: profile photo, bio, coarse location (city/region, not precise GPS), and product preferences.

User content: reviews and ratings, check-ins, posts, comments, and photos you upload.

Order requests: when you submit a request to a seller, we collect your shipping address, phone number (for delivery), and order details. Dose'd does not process product payments and does not store your payment card numbers — you pay the seller directly through the seller's own processor.

Business/brand accounts additionally provide: business name, address, and contact details; business type and license information; and tax/identity information used only to bill and remit the platform fee.

2. Information Collected Automatically

Device and technical information (device type, operating system, app version, identifiers, IP address); usage information (features and screens used, searches, products viewed, interactions, crash and error logs); and general location derived from your IP address (city/region). We do not collect precise GPS location unless you explicitly enable it for a specific feature, and you can disable it at any time.

3. Information from Third Parties

If you sign in with Google or Apple, we receive your name and email from that provider (never your password). Sellers may provide order-fulfillment, tracking, and delivery status. Our payment processor may provide the status of the platform-fee invoices we bill to sellers.

4. How We Use Your Information

To provide and secure the Service (accounts, authentication, core features); to verify that users are 21+; to facilitate order requests between consumers and sellers; to display community content; to send transactional communications and, with your consent, marketing; to improve the Service through analytics and bug-fixing; to detect fraud and abuse; and to comply with legal obligations. Our legal bases include contract performance, consent, legitimate interests, and legal obligations.

Automated systems help with age verification (automatic rejection when the date of birth indicates under 21), content-moderation flagging (with human review), and fraud detection. You may ask a human to review an automated decision at support@dose-d.com.

5. How We Share Your Information

5.1 With sellers

When you submit an order request, we share only the minimum needed for fulfillment: your name, shipping address, phone number (for delivery), and order details. We do NOT share your email (in-app messaging is used instead), your payment information, or your browsing or account history. Our Terms strictly prohibit sellers from using your data for anything other than fulfilling your specific order — no marketing, no resale, no database-building. Report suspected misuse to support@dose-d.com.

5.2 Publicly visible information

Your public handle and photo, your bio, the reviews and posts you publish, and check-ins (per your visibility settings) may be visible to others. You control much of this through your settings; opting into a public profile is your choice, and we do not publish your real name.

5.3 Service providers and legal disclosure

We share data with the providers that operate the Service (below), each contractually obligated to protect it. We may disclose information when required by law or valid legal process, or to protect our rights or users' safety. If Dose'd is involved in a merger or acquisition, information may transfer as part of that transaction. We do not sell, rent, or trade your personal information, and we do not share it with data brokers.

6. Our Service Providers

Supabase / PostgreSQL — authentication and primary database (email, hashed password, and app data; encrypted in transit and at rest).

Cloudflare R2 — storage for images and files you upload (e.g., profile and product photos).

Stripe — used to bill the platform FEE to sellers and to record fee-invoice status. Dose'd does not process product payments and does not receive or store your payment card numbers; product payments occur directly between you and the seller through the seller's own processor.

Brevo — transactional email (confirmations, password resets, notifications) and, with consent, marketing email.

Sentry — error and crash reporting, with personal information minimized.

PostHog — product analytics to understand and improve usage.

7. Data Security

We use TLS/HTTPS in transit and encryption at rest for sensitive data, hash passwords with industry-standard algorithms, validate sensitive operations server-side, enforce row-level access controls in the database, limit employee access, and monitor for suspicious activity. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. In the event of a breach affecting your personal information, we will notify affected users and authorities as required by law (generally within 72 hours of discovery).

8. Data Retention

We keep account information until deletion plus a short recovery window; user content until you or we delete it; order and business records for the period required by law and tax rules; communication logs for dispute resolution; anonymized analytics for a limited period; and error logs briefly. On account deletion there is a 30-day grace period, after which personal data is permanently deleted; reviews may be anonymized and retained to preserve community integrity, and some records may be retained where the law requires.

9. Your Privacy Rights

All users may access, correct, or delete their personal information and opt out of marketing. California residents (CCPA/CPRA) have the rights to know, delete, correct, opt out of sale or sharing (we do neither), limit use of sensitive information, and non-discrimination. Users in the EEA, UK, or Switzerland (GDPR) have the rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. To exercise any right, use your in-app settings or email support@dose-d.com with the subject "Privacy Rights Request"; we verify identity and aim to respond within 30 days.

10. Age Restriction

Dose'd is intended exclusively for users 21 years of age or older. We do not knowingly collect information from anyone under 21; if we learn that we have, we will delete the account and its data. If you believe we have collected such information, contact support@dose-d.com immediately.

11. International Users

Dose'd is based in the United States, and your information will be processed there, where data-protection laws may differ from your country's. By using the Service you consent to this transfer, and we apply appropriate safeguards, including standard contractual clauses with providers where applicable.

12. Changes and Contact

We may update this Policy; we will notify you of material changes by email and/or in-app before they take effect, and update the "Last updated" date for minor changes. Questions or requests: support@dose-d.com (include "Privacy" in the subject), Dose'D LLC, Attn: Privacy, Pennsylvania, United States. If you believe your privacy rights have been violated, you may also contact your local data-protection authority, though we encourage you to reach us first.