1. Service provider
Your D.O.S.E is an information-society service within the meaning of Directive 2000/31/EC on electronic commerce, transposed in Malta by the Electronic Commerce Act (Cap. 426). The details that Article 5 of that Directive requires are set out below.
| Trading name | Your D.O.S.E |
|---|---|
| Operating company | To be inserted on incorporation. The intended place of establishment is Malta. |
| Company registration number | To be inserted on incorporation (Malta Business Registry). |
| Registered address | To be inserted on incorporation. |
| VAT identification number | To be inserted on VAT registration. Until then no VAT is charged by us; see §5 on who is merchant of record. |
| info@yourdose.app — the single address for every enquiry, including legal and data-protection ones. | |
| Website | yourdose.app |
| Person responsible for content | To be inserted on incorporation. The movement, breathwork, meditation and nutrition content is authored by a qualified yoga teacher; see the health disclaimer. |
2. What Your D.O.S.E is, in regulatory terms
Your D.O.S.E is a wellness application. It is not a medical device.
That is not a disclaimer bolted on afterwards; it is a classification we hold ourselves to in what the product does. Under Regulation (EU) 2017/745 on medical devices (MDR), software is a medical device when its intended purpose is diagnosis, prevention, monitoring, prediction, prognosis, treatment or alleviation of disease. The Medical Device Coordination Group's guidance on the qualification of software, MDCG 2019-11, is the test we apply.
Applying it, Your D.O.S.E:
- does not diagnose, screen for, monitor, predict or treat any disease or condition;
- does not produce a clinical output, a risk score, or a recommendation to take or stop any treatment;
- does not replace a consultation with a doctor, physiotherapist or any other healthcare professional;
- offers general movement, breathwork, meditation and nutrition guidance, personalised to preferences and self-reported comfort, for general wellbeing.
Where a person tells us about a health condition, we use it in one direction only: to leave things out. A practice that is commonly unsuitable for a stated condition is withheld or flagged with a caution. We do not offer anything as a therapy for that condition, and we never tell anyone their condition is improving. The health disclaimer sets out where that line falls, and what we ask people to take to a doctor instead.
We also work inside the Yoga Alliance Scope of Practice, which is the professional boundary a yoga teacher is held to: teach movement and breath, do not diagnose, do not prescribe, do not treat.
3. Data protection and where your data lives
Your D.O.S.E processes special category health data under Article 9 of the General Data Protection Regulation (EU) 2016/679, on the basis of explicit consent. The privacy policy is the full account — what is collected, why, for how long, and the rights that attach to it. Three things belong here because they are questions about the operation rather than about the policy:
| Where the data is | On a single private server we operate ourselves, with the database and media on the same machine — not a managed cloud, and not shared with another tenant. That server is currently located in the United States (California). Moving primary storage to an EU region is under active review; the privacy policy says the same thing, in the same words, rather than implying otherwise. |
|---|---|
| Tracking | None. There is no analytics SDK in the application, the admin panel or this website — no Google Analytics, Tag Manager, PostHog, Mixpanel, Amplitude, Segment, Plausible or Matomo. This website sets no cookies and loads every font and image from our own server, so opening it contacts no third party at all and no consent banner is needed. |
| Retention | An account is erased 14 days after its owner asks, and the request can be withdrawn inside those 14 days. A guest account that is never returned to is erased automatically after 90 days. Both are jobs that run, not intentions. |
4. Who else touches your data
We use as few processors as the product allows, and no processor receives health data.
| Processor | What for | Established in |
|---|---|---|
| Brevo (Sendinblue) | Transactional e-mail — password resets, notices. Receives an e-mail address and a first name. | France (EU) |
| Stripe | Payments. Card details go to Stripe and never reach us; Stripe is merchant of record and calculates any VAT due. | Ireland (EU) for EEA customers |
| Expo Push / Apple APNs / Google FCM | Delivering a notification to a device. Receives a device token and the notification text, which never contains health information. | United States |
Cycle and menopause data, conditions, mood entries and body measurements go to none of them. When you ask for a copy of your data we send you a private one-hour download link and the file travels from our server to you; the archive itself is never attached to an e-mail.
5. Consumer rights and disputes
If you are a consumer in the EU, the EEA or the UK, the right of withdrawal and the refund terms are set out in the terms of service, and they follow Directive 2011/83/EU on consumer rights — fourteen days to withdraw from a distance contract without giving a reason, and an express choice about starting the service immediately.
Nothing in our terms takes away a right you have under the consumer law of the country you live in. Where the two disagree, your national law wins.
6. Accessibility
Directive (EU) 2019/882, the European Accessibility Act, has applied since 28 June 2025 to consumer-facing digital services, including mobile applications and e-commerce. As a micro-enterprise — fewer than ten people and well under €2 million turnover — we fall inside the exemption the Directive grants for services. We are stating our position rather than relying on it quietly:
- we treat EN 301 549 and WCAG 2.1 level AA as the target for both the app and this website, not as an obligation we have escaped;
- text contrast is enforced automatically — every colour pair a user has to read is measured against WCAG AA by a test that reads the real stylesheet, so a design change that drops below the threshold fails the build rather than shipping;
- the app honours the operating system's reduce-motion setting, and interface elements carry screen-reader labels and roles;
- touch-target size and full screen-reader coverage are reviewed by hand, not yet enforced by a test — said plainly because "we check everything" is the kind of claim that quietly stops being true;
- where something is not yet accessible we would rather be told than not: write to info@yourdose.app and we will tell you what we can do and by when.
We will publish a full accessibility statement, with the conformance level measured rather than asserted, before the application is released to the stores.
7. Content, liability and links
The text, images, video, audio, practice library and software that make up Your D.O.S.E are ours or licensed to us, and are protected by copyright. You may use them for your own personal practice and not otherwise.
We take care that what we publish is accurate, but general wellness guidance cannot account for one person's circumstances. The health disclaimer explains where our responsibility ends and when to ask a clinician instead. Nothing in this notice limits liability for death or personal injury caused by our negligence, for fraud, or for anything else that cannot lawfully be limited.
Where we link to a website we do not run, we do not control what it says and do not adopt its content as our own.
8. Contact
info@yourdose.app reaches us for everything — legal, data protection, accessibility, billing and support. It is the official address for Your D.O.S.E and the one to use in preference to any other you may have.