1. Who we are
Joshua Gibson ("DoPoint," "we," "us") operates the DoPoint mobile application. This policy explains what we collect, why, and what control you have over it.
2. What we collect
Your name: DoPoint asks for a first name at onboarding so it can address you by name in the app. This isn't tied to any account or login — DoPoint doesn't have user accounts, and we never collect an email address.
Profile information you provide at onboarding: height, weight (start/current/goal), age, biological sex (including "prefer not to say"), activity level, primary goal type, chronotype, tone preference, and any emotional-eating triggers you choose to flag.
Note on biological sex: if you select "prefer not to say," we store that choice as-is. For internal calculations that require a sex input (such as estimating energy needs), we default to a male baseline as a conservative assumption — this resolved value is never shown back to you, and your original "prefer not to say" choice is always what's on record.
Data you log: meals, snacks, exercise entries, weight entries, journal entries, and chat conversations with the in-app assistant.
Health and wearable data, if you connect a device or platform: heart rate, heart rate variability, sleep data, activity/steps, and (if applicable) glucose trends, read from Apple Health, Google Health Connect, or a directly connected wearable (e.g., Fitbit). We only request the specific data types needed to generate your forecast, and only with your explicit permission.
Background updates (iOS, optional): if you connect Apple Health, you can let DoPoint receive new sleep, heart rate variability, and workout data while the app is closed, so your forecast is current when you open it. This uses Apple's background delivery, is controlled by a toggle in Settings (on by default for a new connection, and you can turn it off at any time), reads only the same data types described above, stays on your device, and never sends a notification. iOS decides when updates arrive.
Apple Health data DoPoint writes (optional): if you turn on "Also share your food and weight logs" in Settings, DoPoint saves the food entries you log (calories, macros, and the food's name) and your weigh-ins to Apple Health, where they are stored and managed by Apple Health under your device's own privacy settings. This is off until you turn it on and you can turn it off at any time. Data already written stays in Apple Health until you delete it there (Health app, your profile, Apps, DoPoint).
Usage data: how you interact with the App, for the purpose of improving it. This includes crash and error reports, and anonymous product analytics: which screens are opened and a few key milestones (for example, finishing onboarding or starting a subscription), along with basic device and app information such as device model, operating system version, app version, and language, and an anonymous identifier generated on your device. Analytics never includes what you log or write (food, weight, journal, or chat content) and isn't linked to your identity, since DoPoint has no accounts. Like any online service, our analytics provider receives your device's IP address when your device connects to it.
We do not collect: payment card information (handled entirely by Apple/Google), or precise location data.
3. How we use it
- To generate your daily forecast and the "why" reasoning behind it
- To power in-app chat, including passing relevant context (your name, tone preference, flagged triggers, recent logs, current forecast) to our AI provider so responses are personalized
- To show you your own progress and trends
- To send notifications you've opted into
- To improve the accuracy of the forecasting system over time
- To provide customer support
- To meet legal obligations
We do not sell your data. We do not use your health data for advertising, and DoPoint does not display third-party ads.
4. Who we share it with
- Service providers who process data on our behalf under contract, including our hosting provider (runs the stateless server functions that relay chat and food-lookup requests — it doesn't store your data; there is no DoPoint-operated database), our AI provider (for chat and forecasting), a crash-reporting/error-monitoring provider (technical diagnostic data only — device/app error details, never your logged food, weight, or journal content), an analytics provider (anonymous usage data as described in §2, never your logged food, weight, journal, or chat content), and Apple/Google (for subscription billing and, if connected, health data access). These providers are contractually restricted from using your data for their own purposes.
- Legal requirements — if required by law, subpoena, or to protect against fraud or harm.
- Business transfers — if DoPoint is acquired or merges with another company, your data may transfer as part of that transaction, subject to this policy or a comparable one.
We do not share your data with advertisers, data brokers, or unrelated third parties.
5. AI processing
When you use DoPoint's chat feature, your message and relevant context (as described in §3) are sent to a third-party AI service to generate a response. This exchange is processed to serve your request and is not used to build a public-facing profile of you outside the App.
For certain health or nutrition questions, the AI may include a link to a third-party informational resource (for example, a government or medical-institution website) rather than calculate a personalized answer. No data about you is sent to that third-party site as part of generating the link — but if you choose to open it, your interaction with that site is governed by its own privacy policy, not this one.
6. Your rights and choices
- Access and correction: you can view and edit your profile information in-app at any time.
- Deletion: DoPoint has no accounts, so there's no separate "account" to delete — instead, Settings → "Reset app & erase data" immediately and permanently erases your profile, logs, journal entries, and chat history from your device. Because this data only ever lived on your device, this can't be undone and there's no backend copy or grace period to recover it from.
- Wearable disconnection: you can revoke health-data access at any time through your device's settings or within the App; this stops future data collection but does not automatically delete data already collected — use "Reset app & erase data" for that.
- Notifications: manageable in Settings, including an evening check-in reminder that fires only on a day with no log or mood entry at all.
- Chat history: you can clear your conversation with the in-app assistant at any time from the chat screen. This removes chat history only — it does not affect your logs, weigh-ins, or profile.
- Data export: you can export a complete copy of your data (profile, logs, journal entries, weigh-ins, and forecast history) at any time from Settings → "Export my data," produced entirely on your device as a JSON file.
7. Data retention
We don't operate a backend, so we don't hold a copy of your data to retain in the first place — it lives entirely on your device for as long as you keep the app installed and don't erase it. Uninstalling the app, or using Settings → "Reset app & erase data," removes it immediately, with no server-side copy left behind. The one exception is data already shared with a third-party vendor described in §4 (for example, Apple/Google's own transaction records for subscription purchases, or a crash report already sent to our error-monitoring provider) — that data follows the vendor's own retention policy, not ours.
8. Data security
DoPoint is local-first: your profile, logs, journal entries, weigh-ins, mood entries, and forecast history are stored on your device using SQLite, protected by your device's own OS-level encryption and passcode/biometric lock — the same protection as any other app's local data on iOS or Android. This data does not leave your device except in the specific cases described in §3–4 above (AI chat context sent to our AI provider to generate a response, technical crash diagnostics sent to our error-monitoring provider, and subscription status exchanged with Apple/Google/RevenueCat). All network requests to these providers are encrypted in transit (HTTPS/TLS). Because there is no DoPoint-operated backend holding your personal data, the practical breach surface is limited to these third-party vendor relationships and your own device; if we become aware of a breach affecting your data at any of these providers, we'll notify you as required by applicable law. No system is perfectly secure, and we cannot guarantee absolute security.
9. Children's privacy
DoPoint is not intended for anyone under 13. We do not knowingly collect data from children under 13. If we become aware that we have, we will delete it promptly. Parents who believe their child has provided us data should contact us at GetDoPoint@gmail.com.
10. Sensitive nature of health data
We recognize that eating patterns, weight, and emotional-trigger data are sensitive. We do not use this data to make employment, insurance, credit, or similar consequential decisions, and we do not share it with entities that would.
DoPoint is a direct-to-consumer wellness app. We are not a healthcare provider, health plan, or healthcare clearinghouse, and we have no data-sharing arrangement, integration, or business relationship with any healthcare provider, insurer, or clearinghouse — the standard trigger for HIPAA's "covered entity" or "business associate" categories to apply. Your data is not shared with anyone outside the operation of the App as described in §4.
11. Your state's privacy rights
Depending on where you live, you may have additional rights under state law (e.g., California's CCPA/CPRA, and similar laws in other states) — including the right to know what's collected, request deletion, and opt out of certain data uses.
Because DoPoint keeps your data on your device and has no accounts or server-side copy of it, you can exercise most of these rights yourself in the app: Settings → "Export my data" gives you a copy, and Settings → "Reset app & erase data" deletes it. For anything else, contact us at GetDoPoint@gmail.com. We do not sell or share your personal information for advertising.
12. International users
DoPoint is offered in most countries, with certain countries or regions excluded at our discretion — see the App Store or Google Play listing in your region for current availability. If you are located in the European Economic Area, the United Kingdom, or Switzerland, your data (including chat messages, as described in §5) may be transferred to and processed in the United States or other countries where our service providers operate. By using the App from one of these regions, you acknowledge this transfer; you also retain the rights described in this policy, plus any additional rights under your local law (for example, the right to lodge a complaint with your local data protection authority).
13. Changes to this policy
We'll notify you in-app of material changes before they take effect.
14. Contact
Questions or requests regarding your data: GetDoPoint@gmail.com