OtterCore
Back to VialMate

Legal · VialMate

Privacy Policy

Last updated: May 15, 2026

The short version

VialMate is built around a simple promise: your medication, vial, dose, and health data is yours. This policy explains where it lives and what we do — and don't do — with it.

Everything lives on your device by default. Nothing leaves it unless you explicitly export or share it.

Who runs VialMate

VialMate is published by OtterCore, LLC (otter-core.com), an independent studio.

What data the app handles

While you use VialMate, the app stores the following on your device:

  • Medications you add (name, dose, schedule, color)
  • Vials (lot, source, reconstitution date, volume)
  • Shot logs (date, dose, site, notes, photos you attach)
  • Food entries (search results from public APIs, manual entries)
  • Lab values (manually entered, or imported from Apple Health if you grant access)
  • Side effects (severity, notes, dates)
  • Body composition entries
  • App preferences (theme, app lock, USDA API key, etc.)

Where data is stored

By default, all data lives locally in the app's private storage on your device. We do not run servers that hold your data. We do not have access to it.

If you enable iCloud Sync (a Pro feature, opt-in in Settings → Account), the same data is synchronized through your private CloudKit database in your Apple ID's iCloud. Apple manages this storage — we have no access to it, no ability to read it, and no way to share it with anyone.

Apple Health (HealthKit)

If you authorize VialMate to read from Apple Health, the app uses your data to display body weight, dietary intake, and exercise on the Insights screen, and (with Pro) to auto-import lab values your healthcare provider has linked.

Health data is read-only. We never transmit it off your device. We never aggregate it across users. We never share it with third parties. You can revoke authorization at any time in iOS Settings → Privacy → Health → VialMate.

Optionally, you can let VialMate write your logged injections back to Apple Health's medication log — off by default; toggle in Settings → Apple Health → Outgoing data.

Third-party services

VialMate makes outbound network requests to exactly two services, and only when you actively use the food tracker:

  • OpenFoodFacts (openfoodfacts.org) — public food database, no API key, no identifying information sent.
  • USDA FoodData Central (api.nal.usda.gov) — public food database, requires the API key you supply in Settings → Food & nutrition.

These services receive the search query you type and nothing else. No analytics SDKs, no tracking pixels, no advertising identifiers, no third-party servers receiving your usage. VialMate makes no other network requests of any kind.

Subscription payments

If you purchase VialMate Pro (monthly, yearly, or lifetime), the transaction is processed entirely by Apple's App Store. We never see your payment method, card number, billing address, or Apple ID. We receive only an entitlement confirmation from Apple's StoreKit framework, on your device.

Subscriptions auto-renew through Apple unless cancelled in iOS Settings → [Your Name] → Subscriptions.

Your rights

You can:

  • Export your data anytime via Settings → Backup, import & export (PDF, CSV, JSON).
  • Delete your data via Settings → Reset all data, or by deleting the app.
  • Revoke Apple Health access in iOS Settings → Privacy → Health.
  • Disable iCloud sync in Settings → Account.
  • Manage subscriptions in iOS Settings → [Your Name] → Subscriptions.

Children

VialMate is not directed at children under 13. We do not knowingly collect data from children.

Changes to this policy

If we update this policy in a way that materially changes how data is handled, the change will be reflected in this hosted version and the in-app Privacy Policy view, and the "Last updated" date will be revised. Continued use after a change constitutes acceptance.

Contact