Privacy Policy

We store your email address and whatever you choose to log. We don't sell it, we don't share it for advertising, we don't run analytics or tracking of any kind, and there isn't a single third-party tracker on the site. Nobody but you sees your records. You can have a copy or have the lot deleted whenever you ask.

Your account

Your email address, a scrambled version of your password that can't be turned back into the original, whether you've verified your email, and the date you signed up. That's it — no name required, no phone number, no date of birth.

What you log

Medications and their strengths, doses and the times you took them, vials and their quantities, reminder schedules, and calculator entries. You decide what goes in. If you'd rather a medication was recorded under a nickname than its real name, that works fine — the app doesn't check.

Payment

Handled entirely by Stripe. We never see or store your card number. What we keep is a Stripe customer reference, which plan you're on, whether it's active, and when it renews.

Technical

Our hosting and database providers keep standard server logs — IP address, timestamp, the page or endpoint requested — for security and debugging. These roll off automatically. We don't build profiles from them.

When something breaks

If the app throws an error while you're using it, it sends us a report so we can fix it. The report contains the error message, the technical stack trace, the screen you were on, your browser's user-agent string, which build of the app you were running, and your account id if you were signed in.

It does not contain your medications, your doses, your weights, or your email address. It never includes the part of the address after a ?, because verification and password-reset links carry their tokens there.

This is our own code posting to our own server. There is no Crashlytics, no Sentry, no third-party error service — which is the same reason there are no analytics scripts here. Nobody outside Vialkeeper receives these reports.

One report is one fault. If fifty people hit the same bug, that's a single record with a counter on it, not fifty records about fifty people. When you delete your account, the record stays but your account id is stripped from it, so what remains is the fault with nobody attached. We keep them because a bug nobody can see is a bug nobody fixes.

• Sell or rent your data. Not to anyone, at any price.
• Serve ads, or share anything with advertisers or data brokers.
• Run Google Analytics, pixels, or any other tracking script — there are none on the site. The only thing we send ourselves is an error report when the app breaks, described above.
• Use your health records to train machine learning models.
• Read your records ourselves, except in the rare case where you ask for help with a specific problem and give us permission.

Most of what we send is about your account: sign-in and verification codes, password resets, and a heads-up when a free week or access key is about to end. These come regardless, because without them you could lose access and not know why.

Now and then we may also email you about Pro, such as a reminder that you have a free week to try. You can turn these off in Settings, or with the unsubscribe link at the bottom of any of them, and they stop straight away. We never send emails on anyone else's behalf.

One cookie, and it's the one that keeps you signed in. It's HTTP-only, meaning scripts can't read it, and it's marked so it isn't sent along with requests from other sites. There are no advertising or analytics cookies, which is why you've never seen a cookie banner here.

We use a small number of providers to actually run the service. They can only use the data to provide their service to us:

• Vercel — hosts the application.
• Neon — hosts the database where your records live.
• Resend — sends our emails, described above.
• Stripe — processes payments and holds your card details, which we never receive.
• Forward Email — routes anything you send to our contact address.
• Microsoft — hosts the mailbox that contact address delivers into.

The last two only ever see what you choose to put in an email to us — they never touch your medication records.

Beyond those six, we disclose data only if the law genuinely requires it. If we're served with a valid legal demand for your records, we'll tell you unless we're forbidden from doing so.

On servers in the United States. If you're in Canada, the UK, or the EU, that means your information is processed outside your country and may in principle be reachable by US authorities under their laws. If that isn't acceptable to you, please don't create an account.

Your records stay as long as your account exists — including after a subscription lapses, so nothing is lost if you come back. Delete your account from Settings and everything is erased immediately: not flagged, not archived, actually deleted from our database. Two things survive, and neither identifies you: the payment records tax law requires, which are held by Stripe rather than by us, and any error report from a fault you hit, kept for the fault itself with your account id stripped out.

If you've already uninstalled the app, you can still have the account erased — here's how to delete your account.

Passwords are stored using a slow one-way hash with a unique salt per account, so even we can't recover them. Sessions use signed, HTTP-only cookies with an expiry. Traffic is encrypted in transit, and the database is encrypted at rest. Every query is scoped to your account, so one signed-in user cannot reach another's records.

No system is perfectly secure. If a breach ever affects your data, we'll tell you and the relevant regulator promptly rather than quietly.

Whatever country you're in, you can ask us to:

• Send you a copy of everything we hold about you.
• Correct anything that's wrong.
• Delete your account and all its records.
• Stop processing your data, or tell you exactly what we're doing with it.

Email hello@vialkeeper.com and we'll respond within 30 days. There's no charge. Under Canada's PIPEDA you may complain to the Office of the Privacy Commissioner of Canada, and under the UK GDPR or EU GDPR you may complain to your local supervisory authority — though we'd appreciate the chance to fix it first.

Vialkeeper is for adults. We don't knowingly collect data from anyone under 18, and we'll delete any account we find belongs to a minor.

If we change how we handle your data in any way that matters, we'll email you before it takes effect rather than quietly editing this page. Smaller clarifications just get a new date at the top.