Vialmetry

Privacy Policy

Effective date: 29 September 2026

Applies to the Vialmetry apps for iPhone, iPad and Android.

The short version

  • Your log is stored on your device. You can use every part of Vialmetry without an account.
  • Nothing you record leaves your device unless you create an account and choose Save to cloud.
  • No ads, no analytics, no tracking. We do not sell or share your data.
  • Face ID, Touch ID and fingerprint unlock are handled by your phone. We never receive biometric data.
  • You can delete your cloud account from inside the app at any time. It is deleted immediately.

1. Who we are

Vialmetry is published by Crestwood Holdings Management LLC (“Crestwood”, “we”, “us”). We are responsible for the personal data described in this policy.

Email: info@vialmetry.app
Postal address: 12220 North MacArthur Boulevard, Suite F-19, Oklahoma City, OK 73162, United States

2. What Vialmetry is and is not

Vialmetry is a private logbook and arithmetic tool. You enter the details of your own vials, doses, schedules and injection sites; Vialmetry does the unit conversions you ask for and keeps the record.

Vialmetry is not a medical device and does not diagnose, treat, cure, or prevent any medical condition. It does not provide medical advice, does not recommend a dose, a compound or a schedule, and does not decide whether any dose is appropriate. Always consult a licensed healthcare provider about your health and any medication.

3. Data on your device

Everything you enter is saved in a database inside the app’s private storage on your phone or tablet. We cannot see it. It includes:

  • Compounds — the names you select from the built-in list or create yourself.
  • Vials — strength, water added, dates, beyond-use days, cost, and optional lot number, source, storage and notes.
  • Dose entries — amount, volume, syringe units, date and time, injection site, notes, and whether a dose was skipped.
  • Site reactions — the type (for example soreness or redness), severity and notes you record for an injection site.
  • Schedules — frequency, planned amounts, on/off weeks, and reminder times.
  • Settings — syringe and unit preferences, currency, site rest days, reminder wording, theme and appearance, body-map illustration (female or male figure), and whether the app lock is on.

Settings also contain space for an optional baseline health snapshot (for example blood pressure, resting heart rate, temperature, oxygen saturation, fasting glucose and a note). The current version of the app has no screen for entering these values, so they stay empty; if a future version adds one, this policy will be updated first.

Files you create

When you export a backup, a spreadsheet or a printable summary, the file is built on your device and handed to your phone’s share sheet. Where it goes next is your choice; once you send it somewhere, that copy is governed by wherever you sent it. If you type a name into a printable summary, it is used only for that file and is not saved.

Before a backup import or a cloud restore replaces your log, Vialmetry saves a recovery copy of the previous log in the app’s private storage on the device.

Your device’s own backups

On Android, Vialmetry opts out of Android’s automatic app-data backup. On iPhone and iPad, as with most apps, the app’s local data may be included in your iCloud Backup or computer backup if you have those turned on; those backups are controlled by you and Apple, not by us.

4. Optional cloud account and cloud copy

A cloud account is optional. It exists so you can move your log between your own devices.

Your account

To create an account you provide an email address and a password. Our provider stores your password in hashed form; we cannot read it. The account also has a system-generated account ID and records such as when it was created, when you last signed in and whether your email is confirmed. We use your email to run your account, for example to send a confirmation link. Your sign-in session is stored in your device’s protected storage (the iOS Keychain or Android’s encrypted secure storage).

Your cloud copy

Nothing is uploaded when you create an account. A cloud copy is created or replaced only when you tap Create cloud copy or Save this device to cloud and confirm. It is not updated automatically in the background.

Each account holds one cloud copy. It is a complete copy of the log on the device you saved from — everything listed in section 3 (compounds, vials, doses, site reactions, schedules and settings) — plus the date it was exported, the app version, a revision number and timestamps. Your device is changed from the cloud copy only when you tap Load cloud copy on this device and confirm.

The cloud copy does not contain biometric data, notification history, files you exported, or anything else from your device.

No provider backup of cloud copies

Our cloud database is not covered by a provider-managed backup or point-in-time recovery. If the cloud service failed or its data were lost, your cloud copy could be lost with it; the log on your device would not be affected. The cloud service may also be temporarily unavailable at times. Keep your own backup file (Settings → Backup → Export a backup): that file, not the cloud copy, is how you recover your log.

The cloud copy is protected by access rules in the database that let each signed-in account read and change only its own records. It is encrypted in transit. It is not end-to-end encrypted, which means people with administrative access to our database could technically access it. We do not look at your cloud copy except when you ask us to for support, to carry out a deletion request, to keep the service secure, or when the law requires it.

5. What we do not collect

Vialmetry contains no advertising, no analytics or tracking tools, and no crash-reporting tools. It does not access your location, contacts, photos, camera or microphone. It does not connect to Apple Health or Health Connect. It does not process payments, and it does not use an advertising identifier or register your device for push notifications. We do not track you across other companies’ apps or websites.

6. Biometric unlock

If you turn on Require Face ID (or biometric unlock on Android), your phone’s operating system checks your face or fingerprint and tells Vialmetry only whether the check succeeded. Vialmetry never receives, stores or sends biometric data. The app lock protects the app on that device; it is not encryption and does not change what is in a cloud copy.

7. Reminders and notifications

Reminders are optional. They are scheduled by your device itself from the schedules you turn reminders on for; no server is involved, and we never see them. Vialmetry asks for notification permission only when you enable a reminder.

You choose what a reminder shows on a locked screen:

  • Say nothing (the default): “Scheduled reminder — Open Vialmetry to view the details.”
  • Name the compound: the compound name and scheduled amount. Anyone who can see your lock screen can read it.

8. How we use data

We use the data described above only to provide the features you choose:

  • to create, sign in to and secure your account;
  • to store the cloud copy you save and return it to you when you load it;
  • to send account emails, such as email confirmation;
  • to answer you when you contact us, and to process deletion requests;
  • to keep the service secure and meet legal obligations.

We do not use your data for advertising, for marketing profiles, or to infer anything about your health, and we do not sell it.

9. Service providers and disclosure

We do not sell your personal data, share it for cross-context behavioral advertising, or use it for targeted advertising. We use a small number of service providers that process data only on our instructions:

ProviderWhat it doesData involved
Supabase, Inc.Account sign-in, database for cloud copies, and the server function that deletes accounts. Hosting region: United States (AWS us-east-2, Ohio)Email, hashed password, account ID and timestamps, your cloud copy, and technical request data such as IP address and device/browser details in security and audit logs
Supabase, Inc. (its built-in email service)Sends account emailsYour email address and the message content

Apple and Google distribute the app and process data under their own privacy policies. If you have chosen to share diagnostics or analytics with app developers in your device settings, Apple or Google may give us crash reports and aggregated usage statistics. These do not include the contents of your log.

We may disclose information if required by law or valid legal process, to protect the rights, safety or property of our users or others, or as part of a merger, acquisition or sale of assets, in which case this policy’s commitments will continue to apply to your data.

10. Retention and deletion

On your device

Your log stays on your device until you delete entries in the app or remove the app. Uninstalling Vialmetry removes its local data from the device; on Android you can also clear the app’s storage in system Settings. Copies in your own device backups or in files you exported are not affected and are yours to manage.

In the cloud

Your account and cloud copy are kept until you delete the account. Saving again replaces the previous cloud copy.

Delete in the app: open Settings (the gear on the Today screen), go to Private cloud sync, tap Delete cloud account and confirm. This immediately and permanently deletes your account — email, password hash and account ID — together with your cloud copy and every cloud record linked to the account. It does not change the log on your device.

Delete without the app: see how to request account deletion (vialmetry.app/delete-account).

What may remain for a limited time

  • Database backups: none. We do not keep provider-managed backups of the cloud database, so once your account is deleted no backup copy of it or of your cloud copy remains with us.
  • Security and service logs: our provider may keep operational and security logs, which can include IP addresses and timestamps, for a limited period: logs available to us are kept for 1 day on our current plan; Supabase’s own infrastructure logs are kept under Supabase’s privacy policy
  • Emails you send us, including deletion requests: kept for up to 2 years, then deleted

11. Security

  • All communication between the app and our provider uses HTTPS (TLS).
  • Cloud data is stored by our provider, which encrypts data at rest. Supabase states that customer data is encrypted at rest with AES-256.
  • Database access rules confine each account to its own records. Privileged keys are kept on the server, never in the app.
  • Your sign-in session is kept in your device’s protected storage, and an optional app lock is available.

No method of storage or transmission is completely secure. If a breach affecting your personal data occurs, we will notify you and the authorities as required by law.

12. Your choices and rights

  • Use it without an account. Every feature except cloud copy works offline without an account.
  • See and correct. Everything you entered is visible and editable in the app.
  • Take it with you. Settings → Backup → Export a backup creates a complete file of your log at any time.
  • Delete. Delete entries in the app, delete your cloud account in Settings, or email us.
  • Ask us. Email info@vialmetry.app to ask what cloud data we hold about you, or to have it corrected or deleted.

Depending on where you live, you may have legal rights to access, correct, delete or receive a copy of your personal data, to withdraw consent, to appeal our decision on a request, and to complain to a data-protection authority. We will respond within the time the law requires. To protect your account, we will ask you to write from the email address on the account or otherwise verify the request. We will not treat you differently for exercising your rights. If we cannot meet a request, we will explain why and how you can appeal.

13. Children

Vialmetry is not directed to, and is not intended for use by, anyone under 18. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will delete it.

14. International users

Crestwood Holdings Management LLC is based in the United States. Our business address is in Oklahoma City, Oklahoma. If you create a cloud account, your account and cloud copy are stored and processed in the United States, which may be outside your country. Where required, we rely on appropriate safeguards for such transfers.

If you are in the European Economic Area, the United Kingdom or a similar jurisdiction: we process account data to provide the service you request, and we process the health-related contents of a cloud copy on the basis of your explicit choice to save it. You can withdraw that choice at any time by deleting your cloud account. If a law in your country gives you rights that this policy does not describe, they still apply, and you can contact us to use them.

15. Changes to this policy

We will post any changes on this page and update the effective date. If a change materially affects how we handle data you have already given us, we will tell you in the app or by email before it takes effect.

16. Contact us

Crestwood Holdings Management LLC
Email: info@vialmetry.app
12220 North MacArthur Boulevard, Suite F-19, Oklahoma City, OK 73162, United States