DATA SOVEREIGNTY & GLOBAL PRIVACY RIGHTS

GDPR & CCPA Data Rights

Effective Date: September 7, 2026 | Document Revision 2.4

🔒
Complete Data Sovereignty:

Dosezy is architected to guarantee absolute compliance with the European Union GDPR, California CCPA/CPRA, and global data protection laws. Because Dosezy stores your health records locally on your device hardware, you exercise complete ownership and control over your personal data.

01.Global Privacy Framework Compliance

Dosezy respects and enforces statutory data protection rights under major international privacy legislation, including the EU General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA/CPRA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), and Brazil General Data Protection Law (LGPD).

02.Right to Local Data Sovereignty

Under GDPR Article 6 and CCPA regulations, data subjects have the right to restrict unauthorized processing of personal health metrics. Dosezy satisfies this requirement at the architectural level: core client applications function 100% offline without transmitting data to central servers or third-party cloud aggregators.

03.Right of Access & Data Portability

Under GDPR Article 20 and CCPA rules, you have the right to export your personal data in a structured, commonly used, and machine-readable format. Dosezy provides built-in tools allowing you to export your full medication schedule, dosage history, and logs as an encrypted JSON file or formatted PDF log directly from local device storage without server intervention.

04.Right to Erasure ("Right to be Forgotten")

Under GDPR Article 17 and CCPA deletion rules, you have the right to permanently purge your data. Because Dosezy stores information locally in your device's SQLite Room database, you can exercise immediate erasure by choosing "Clear App Data" in your device OS settings or uninstalling the app.

If you use optional Caregiver Cloud sync, clicking "Revoke Caregiver Access" instantly purges encrypted sync buffers from the relay server.

05.Zero Commercial Data Sale or Behavioral Profiling

Dosezy explicitly guarantees that we do not "sell", "share", or "rent" user personal information or health metrics as defined by the CCPA/CPRA. We perform zero automated decision-making, credit scoring, or commercial profiling.

06.Data Protection Contact & Officer Protocol

For questions regarding your technical data portability rights or privacy framework compliance, contact our open-source maintainers at privacy@dosezy.com or open an issue on our GitHub repository.