Vial is built around a simple privacy posture: your log lives on your device and synchronizes across your own devices through your private iCloud account. We do not run servers that store your log, and we do not collect personal information about you to sell, share, or analyze.
This Privacy Policy explains what information the Vial iOS application and the vialpeptide.com website (the "Service") handle, where it lives, and the choices you have. It applies to 185 Labs ("we", "us", "our") as the operator of the Service.
1. What Vial stores, and where
On your device
Everything you log in Vial — peptides, doses, vials, schedules, sites, profile fields, notification preferences — is written to a local SwiftData database on your iPhone, iPad, or Apple Watch.
In your private iCloud (Apple)
Vial uses Apple's CloudKit to synchronize your log across the Apple devices signed into your iCloud account. That data sits in your private CloudKit container, which is governed by Apple's Privacy Policy. We have no access to it.
Apple HealthKit
With your permission, Vial reads selected metrics from Apple HealthKit at the time you view them — for example, weight, heart rate variability, resting heart rate, blood pressure, and sleep. Vial does not copy these samples into its own database. You can revoke HealthKit access at any time in iOS Settings > Privacy & Security > Health.
2. What we do not collect
- We do not require an account, email address, or password to use Vial.
- We do not embed third-party advertising or tracking SDKs.
- We do not run product analytics on your in-app behavior.
- We do not collect the contents of your log on our servers.
3. Information processed by service providers
Apple — App Store and CloudKit
Apple processes your purchase, subscription state, and CloudKit sync. We may receive aggregated, non-identifying sales and crash reports from App Store Connect (for example, the number of downloads or anonymized crash logs).
RevenueCat — subscription management
Vial uses RevenueCat to manage subscription entitlements. RevenueCat receives a randomly generated user identifier and the result of your App Store transaction so that the app knows whether your subscription is active. RevenueCat does not receive your name, email, or any of your log entries. See RevenueCat's Privacy Policy for their handling.
Apple Push Notifications
Reminders are scheduled locally on your device using iOS notifications. We do not send push notifications from our servers.
4. Information collected on vialpeptide.com
The marketing website does not set advertising cookies and does not embed third-party trackers. Standard server access logs (IP address, user agent, requested URL, timestamp) may be retained briefly for security and diagnostics. We do not use this data to build a profile of you.
5. Children
Vial is intended for use by adults aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a minor has provided information to us, contact us and we will take reasonable steps to delete it.
6. Your choices and rights
- Delete the app. Uninstalling Vial removes the local database from that device. Sign out of iCloud or delete the app's CloudKit data through iOS Settings > Apple ID > iCloud > Manage Account Storage to remove the synced copy.
- Export your log. Vial supports exporting your log to PDF for personal use; you can also use standard iOS data-export options.
- Revoke HealthKit. Disable HealthKit categories at any time in iOS Settings.
- Manage notifications. Configure or disable notifications in iOS Settings > Notifications > Vial.
- Manage your subscription. Cancel or change a subscription in your App Store account settings.
Depending on where you live, you may have additional rights under laws such as the EU General Data Protection Regulation or the California Consumer Privacy Act — including rights to access, correct, delete, or restrict the use of personal information we hold about you. Because we do not maintain a server-side copy of your log, most of these requests are exercised directly through your device. You can contact us at the address below for anything else.
7. Security
Local data is protected by iOS data-at-rest encryption tied to your device passcode. Sync data is protected in transit and at rest by Apple's CloudKit infrastructure. Subscription tokens exchanged with RevenueCat are transmitted over TLS. No system is perfectly secure; you are responsible for keeping your device passcode and Apple ID credentials safe.
8. International transfers
We are based in the United States. Apple and RevenueCat may process information in the United States or other countries where they operate. By using Vial, you consent to that processing where permitted by law.
9. Changes to this policy
We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, when the change is material, present a notice in the app or on this page.
10. Contact
Privacy questions can be sent to support@vialpeptide.com.