Terms of Service (Patient)

# DoseTempo — Terms of Service (Patient)

> **Scope:** These Terms govern the relationship between DoseTempo and the
> **patients** who use the platform to track their prescribed peptide doses.
> You are an end user of the Service. Your prescribing practice — not
> DoseTempo — is your healthcare provider and the covered entity responsible
> for your care and your medical record. DoseTempo is a tool your practice
> uses to help you track your doses.
>
> If you are a clinic, staff member, or business administrator, these are
> not your terms — see `docs/TERMS-OF-SERVICE.md` instead.
>
> **Effective date:** October 24, 2026
> **Last updated:** October 24, 2026
> **Owner:** Legal / Security Officer — Aerron Retikis (aerron@domi-nation.online)

---

## Table of Contents

1. [Acceptance of Terms](#1-acceptance-of-terms)
2. [What DoseTempo Is (and Is Not)](#2-what-dosetempo-is-and-is-not)
3. [Your Account & Access](#3-your-account--access)
4. [Your Responsibilities](#4-your-responsibilities)
5. [Your Health Information & Privacy](#5-your-health-information--privacy)
6. [What You Can and Cannot Do](#6-what-you-can-and-cannot-do)
7. [Dose Reminders & Notifications](#7-dose-reminders--notifications)
8. [No Medical Advice](#8-no-medical-advice)
9. [Service Availability](#9-service-availability)
10. [Account Changes & Archiving](#10-account-changes--archiving)
11. [Disclaimers](#11-disclaimers)
12. [Limitation of Liability](#12-limitation-of-liability)
13. [Changes to These Terms](#13-changes-to-these-terms)
14. [Governing Law](#14-governing-law)
15. [Contact](#15-contact)

---

## 1. Acceptance of Terms

By signing in to or using DoseTempo (the "Service"), you agree to these
Terms of Service ("Terms"). If you do not agree, do not use the Service.

Your account was created by your prescribing practice. You did not — and
cannot — self-register. Your use of the Service is part of your care
relationship with your practice.

---

## 2. What DoseTempo Is (and Is Not)

### 2.1 What DoseTempo is

DoseTempo is a tool that helps you:

- Track when you take your prescribed peptide doses
- Log how you're feeling and any responses to your injections (diary)
- Receive reminders when a dose is scheduled
- Message your practice's care team
- See resources about the peptides you're prescribed

### 2.2 What DoseTempo is not

- DoseTempo is **not** a healthcare provider and does not provide medical
  advice, diagnosis, or treatment.
- DoseTempo does **not** verify whether you actually administered a dose.
  It records what you report.
- DoseTempo is **not** a substitute for your EHR, your practice's
  instructions, or professional medical judgment.
- Your treatment relationship is with **your practice** — not with
  DoseTempo.

---

## 3. Your Account & Access

### 3.1 How your account is created

- Your account is created by your prescribing practice when they enroll
  you. You do not self-register.
- You receive a one-time setup link by email and set your own password on
  first sign-in. **Passwords must be at least 8 characters and include a
  capital letter, a number, and a symbol.**

### 3.2 Multi-factor authentication

- Every sign-in requires a 6-digit verification code emailed to your
  account. This cannot be disabled.
- **Never share your password or verification code with anyone** —
  including family, caregivers, or anyone claiming to be from DoseTempo
  or your practice. DoseTempo staff will never ask for them.

### 3.3 Session management

- Only one active session is allowed per account at a time.
- You are automatically logged out after 15 minutes of inactivity.
- If you are told someone is already logged in to your account, that is a
  red flag — report it immediately (see §15).

### 3.4 Changing your password

- You can change your password from "My info" → "Change password."
- If you forget your password, use the "Forgot your password?" link on
  the sign-in page, or ask your practice to send you a reset link. The
  reset link is single-use and expires in 7 days.

---

## 4. Your Responsibilities

As a patient user, you are responsible for:

- **Keeping your password and verification code private.** Never share
  them with anyone — including family members, caregivers, or anyone
  claiming to be from DoseTempo or your practice.
- **Logging in only on your own device.** Do not use a shared or public
  computer to access your account. If you must, sign out completely when
  finished.
- **Reporting anything unusual immediately.** If you see information that
  does not belong to you, if you receive a verification code you did not
  request, or if you suspect someone else has accessed your account,
  contact your practice or file a support ticket marked "URGENT —
  SECURITY" right away.
- **Logging your doses accurately.** DoseTempo records what you report —
  it does not verify administration. Your practice relies on what you log.

---

## 5. Your Health Information & Privacy

### 5.1 Who owns your record

Your prescribing practice is the **covered entity** that owns your
medical record. DoseTempo is the **business associate** — a tool your
practice uses to manage your peptide protocol. We act on your practice's
behalf under a Business Associate Agreement (BAA) with them.

### 5.2 What we collect

When your practice enrolls you, we receive: your name, date of birth,
email, phone, your prescribed peptide(s), your dosing schedule, your dose
confirmation logs, your injection site selections, your diary entries
(mood, symptoms, injection responses), and messages between you and your
practice's staff.

### 5.3 How your information is protected

- Your information is encrypted in transit (TLS) and at rest.
- Only staff at the location where you receive care can see your
  information — staff at other locations cannot.
- Every access to your information is audit-logged.
- See the DoseTempo Privacy Policy (`docs/PRIVACY-POLICY.md`) for your
  full privacy rights, including access, amendment, accounting of
  disclosures, and breach notification.

### 5.4 Your rights

Under HIPAA, you have the right to access your record, request
amendments, receive an accounting of disclosures, request restrictions,
and be notified of breaches. Most of these rights are exercised **through
your practice** (the covered entity). See Privacy Policy §6 for details.

---

## 6. What You Can and Cannot Do

### 6.1 You can

- View your own prescriptions, dose history, diary entries, and messages.
- Log your doses and select injection sites.
- Create diary entries and flag them for your doctor's attention.
- Message your practice's care team.
- Enable or disable dose reminders.
- Change your own password.

### 6.2 You cannot

- **You cannot edit your own contact information** (name, date of birth,
  email, phone). If it needs to change, message your practice through the
  platform and they will update it. This is by design — your practice
  maintains the authoritative medical record.
- **You cannot export or download your data.** If you want a copy of your
  records, request it through your practice (the covered entity).
- **You cannot delete your own account or your own data.** Only your
  practice can deactivate your account or direct data changes.
- **You cannot access another patient's information.** Each account is
  isolated to one patient.

---

## 7. Dose Reminders & Notifications

### 7.1 How reminders work

If you enable push notifications, DoseTempo sends up to three
**de-identified** reminders per scheduled dose:

1. **Pre-dose** — 1 hour before your scheduled dose time
2. **Due** — at your scheduled dose time
3. **Post-dose** — 1 hour after, only if you haven't logged your dose yet
   (also sent via email as a fallback)

### 7.2 Reminders contain no PHI

The notification body contains **no protected health information** — no
name, no peptide, no dose details. It is intentionally de-identified so
that if it's seen on your lock screen, it reveals nothing about your
treatment.

### 7.3 Turning off reminders

- You can turn off push notifications at any time from the app or your
  device settings.
- When you turn them off, the app asks you to confirm, and **notifies your
  clinic** that you've turned off reminders so your care team is aware.
- Turning off reminders does not affect your ability to use the app —
  you'll still see your schedule when you log in.

### 7.4 iPhone

On iPhone, push notifications require adding DoseTempo to your home
screen (a Safari limitation). The app will guide you through this.

---

## 8. No Medical Advice

DoseTempo does not provide medical advice, diagnosis, or treatment
recommendations. The "Peptide resources & cautions" page shows general
information about the peptides you are prescribed — it is not a
substitute for your practice's instructions. If you have a medical
question or concern, contact your practice directly.

---

## 9. Service Availability

While we strive for high availability, we do not guarantee the Service
will be uninterrupted or error-free. The Service depends on third-party
infrastructure that may experience outages outside our control. If the
Service is unavailable, keep a paper log of your doses and enter them
when the Service returns.

---

## 10. Account Changes & Archiving

### 10.1 Archiving

- Your practice controls your account. If your practice **archives** you,
  your access to the platform ends.
- **Archived patients cannot be reactivated.** If you are archived and
  later need to resume tracking, your practice must create a new patient
  record for you.
- Your records (prescriptions, dose history, diary entries, messages) are
  **retained for audit and HIPAA compliance** — they are not deleted, only
  hidden from the active patient list.

### 10.2 Termination by your practice

If your practice terminates its relationship with DoseTempo, your data is
returned to your practice or destroyed at their direction. Your practice
remains responsible for your record.

---

## 11. Disclaimers

The Service is provided "as is" and "as available," without warranties
of any kind, express or implied. Adherence data reflects what you report
— DoseTempo does not verify dose administration.

---

## 12. Limitation of Liability

To the maximum extent permitted by law, DoseTempo's liability for any
claim arising out of or relating to these Terms or the Service shall not
exceed the amount paid for the Service in the twelve (12) months
preceding the claim. Nothing in this section limits liability that cannot
be limited under applicable law, including liability for breaches of the
HIPAA Privacy, Security, or Breach Notification Rules.

---

## 13. Changes to These Terms

We may update these Terms from time to time. Material changes will be
communicated to your practice, who is responsible for informing you.
Continued use of the Service after changes take effect constitutes
acceptance of the revised Terms.

---

## 14. Governing Law

These Terms are governed by the laws of the jurisdiction in which
DoseTempo is organized, without regard to conflict-of-laws principles.

---

## 15. Contact

For questions about these Terms, your account, or to report a security
concern:

- **Contact your prescribing practice first** — they are your healthcare
  provider and the covered entity responsible for your care.
- For platform-level concerns, contact the DoseTempo Legal/Security
  Officer — Aerron Retikis — at aerron@domi-nation.online, or file a
  support ticket through the platform. Mark urgent security concerns as
  "URGENT — SECURITY."

---

*These Terms are the official Patient Terms of Service of DoseTempo,
effective as of the last-updated date above.*