Privacy Policy

This Privacy Policy explains how DoseIt collects, uses, and protects your personal information. DoseIt is operated by Bincor Ltd("we", "us", "our"), a company registered in England and Wales.

1. Who we are

DoseIt is the trading name of:

For the purposes of UK and EU data protection law, Bincor Ltd is the data controller of personal information collected through doseit.io.

2. Scope

This policy applies to information we collect when you visit doseit.io and join our waitlist. It does not yet cover the DoseIt mobile application — a separate notice will be provided when the app is released and you create an account.

3. What information we collect

When you join our waitlist, we collect:

• Your email address, which you provide voluntarily through the signup form.
• Signup metadata: the date and time of signup, and the source (e.g. doseit.io).

We do not collect names, postal addresses, payment information, health data, or device identifiers through the waitlist.

We do not currently use cookies, analytics, or tracking pixels on doseit.io. If we add any of these in the future, we will update this policy and, where required by law, ask for your consent first.

4. How we use your information

We use your email address only to:

• Send you a single confirmation email when you join the waitlist.
• Notify you when DoseIt is ready for you to access (typically one or two emails before launch).
• Respond to support requests if you reply to one of our emails.

We will not use your email for unrelated marketing, share it with third parties for marketing, or sell it to anyone.

5. Legal basis for processing (UK / EU users)

Under UK GDPR and EU GDPR, our legal bases are:

• Consent(Article 6(1)(a)) — for sending you waitlist updates and the launch announcement. You can withdraw consent at any time by replying "unsubscribe" to any email or contacting us.
• Legitimate interests (Article 6(1)(f)) — for sending the initial confirmation email so you know your signup worked, and for keeping minimal records to prevent duplicate signups.

6. Who we share your information with

We use the following service providers ("processors") who handle your email on our behalf under written agreements:

• Supabase — stores the waitlist database. Servers located in the European Union.
• Resend — sends transactional and waitlist emails. Servers located in the United States.

Where we transfer data to a country outside the UK/EEA (such as Resend in the US), we rely on the European Commission's adequacy decisions and/or Standard Contractual Clauses to ensure your data is protected to UK/EU standards.

We do not share your information with anyone else, except where required by law (for example, in response to a valid court order).

7. How long we keep your information

We retain your email until:

• You ask us to delete it; or
• Two years after we either launch DoseIt to you or close the waitlist, whichever comes first.

After that, your record is permanently deleted from our database.

8. Your rights (UK / EU users)

If you are in the UK or the EU (including France, Germany, Italy, Spain), you have the following rights under UK GDPR / GDPR:

• Access — ask for a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure("right to be forgotten") — ask us to delete your data.
• Restriction — ask us to pause processing of your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent at any time, without affecting processing carried out before withdrawal.

To exercise any of these rights, email doseit.support@gmail.com. We aim to respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority. The relevant authorities are:

• United Kingdom: Information Commissioner's Office (ICO) — ico.org.uk
• France: Commission Nationale de l'Informatique et des Libertés (CNIL) — cnil.fr
• Germany: Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI), or the data protection authority of your federal state (Land)
• Italy: Garante per la protezione dei dati personali — garanteprivacy.it
• Spain: Agencia Española de Protección de Datos (AEPD) — aepd.es

9. US residents

If you are a resident of the United States, you may have additional rights under your state's privacy law (for example, the California Consumer Privacy Act and similar laws in Virginia, Colorado, Connecticut, Utah, Texas, and other states). These typically include the rights to:

• Know what personal information we have collected.
• Delete personal information.
• Opt out of the "sale" or "sharing" of personal information for cross-context behavioural advertising.

We do not sell or share your personal information for advertising purposes. To exercise other rights, email doseit.support@gmail.com. We will not discriminate against you for exercising these rights.

10. Children

DoseIt is intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Security

We use industry-standard practices to protect your information, including encryption in transit (HTTPS) and access controls on our database. No system is perfectly secure; if we ever discover a personal data breach affecting you, we will notify you and the relevant supervisory authority where required by law.

12. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent change. Material changes will be communicated by email to waitlist members.

13. Language

This policy is published in English. English is the operative language for any interpretation of this policy. Translations may be provided in the future for convenience, but the English version prevails in case of conflict.

14. Contact

Questions, requests, or complaints: