Privacy Policy

VialScope is operated by North West Maple, LLC (referred to here as VialScope, we, us, or our). This policy applies to the VialScope website at vialscope.com and the VialScope application. It does not cover any third party site or service that links to or from VialScope, which is governed by its own privacy policy.

We collect only what is needed to provide the service.

• Account information. Your email address and sign-in credentials, which are managed by our authentication provider. You may also add a display name and your preferred unit for weight.
• Health data you log. Injections (compound, dose, route, site, and timing), daily and occasional metrics (such as weight, sleep, mood, and energy), bloodwork values, the reference ranges printed on your results, vials and reconstitution details, appointments, reminders you set, and any notes you add.
• Lab files you upload. When you upload or share a lab report, its contents are processed only to transcribe the printed values into your record. We do not retain the uploaded file after the values are read.
• Technical and log data. Standard server and security logs, including IP address and request metadata, that are needed to operate and protect the service.
• Product usage. Which screens of the application are used, recorded so we can improve it. This stays with us, is never sold or shared for advertising, and is deleted with your account.

We do not use tracking cookies for advertising, and we do not knowingly collect data you have not entered or uploaded yourself.

We use your information only to provide and improve VialScope, specifically to:

• create and secure your account and authenticate your sign-in;
• store your record and show it back to you over time on your timeline;
• transcribe the values from lab reports you upload;
• let you export, correct, and delete your data;
• operate, secure, debug, and improve the service;
• respond to your requests and provide support.

We do not sell your data. We do not use it for advertising. We do not use it to build a profile of you for any purpose other than running VialScope for you.

You provide your health data to VialScope on the basis of your consent, given when you choose to log or upload it. You can withdraw that consent at any time by deleting the relevant entries or your account. We also process limited account and technical data as needed to provide the service you have asked for and to meet our legal and security obligations.

We do not sell your data, and we do not share it for advertising. We share it only with the service providers that operate VialScope on our behalf, and only so they can provide their service to us. Each is bound by its own security and privacy commitments and may process your data solely on our instructions.

• Clerk. Manages sign-in and your account credentials.
• Supabase. Provides the managed database and hosting that store your record and serve the application, in the United States.
• Anthropic. When you upload a lab report, its contents are sent to Anthropic solely to transcribe the printed values. Anthropic does not use this content to train its models. The transcription reads the numbers as printed. It does not interpret, diagnose, or judge them.

We may also disclose information if required by law, to comply with a valid legal request, or to protect the rights, safety, and security of our users and the service. If VialScope is ever involved in a merger, acquisition, or sale of assets, we will require the successor to honor this policy, and we will notify you of any change in control of your data.

Some of what you log is consumer health data. You are in control of it, and we treat it with particular care.

• You choose what to log, and you can edit or delete any entry at any time.
• We collect and process your consumer health data only to provide VialScope to you, as described in this policy, and only with your consent.
• We do not sell your consumer health data, and we do not share it for advertising or with data brokers.
• You can export your full record as a CSV file at any time from the Data screen inside the application.
• You can withdraw your consent, and delete your consumer health data, by deleting the entries or your account.

We take the security of health data seriously and design the service around it.

• Encryption. Your data is encrypted in transit using TLS and encrypted at rest using AES-256.
• Isolation by account. Access is enforced at the database layer by row-level security, so each account can read and write only its own records. This is applied to every table that holds your data.
• Least privilege. The application connects with scoped credentials and does not use administrative database keys. We limit access to production systems to what is needed to operate them.
• Managed infrastructure. The service runs on established managed cloud providers in the United States, with authentication handled by a dedicated identity provider that supports multi-factor authentication.

No method of storage or transmission is completely secure, and we cannot guarantee absolute security. If we ever become aware of a breach that affects your data, we will notify you and the appropriate authorities as required by law.

We keep your data while your account is active so the service can show you your history. When you delete an entry, it is removed from your active record. When you delete your account, we delete the record associated with it. Encrypted backups are retained on a short rolling cycle for disaster recovery and are then overwritten. We may retain limited technical logs for a longer period where needed for security or to meet a legal obligation.

You are in control of your data. Depending on where you live, you may have some or all of the following rights, and we honor these requests for every user regardless of location:

• Access and portability. View your full record in the application, and export it as CSV from the Data screen at any time.
• Correction. Edit any entry directly in the application.
• Deletion. Delete any entry, or delete your account and its associated record, at any time.
• Withdraw consent. Stop our processing of your health data by deleting the entries or your account.
• Non-discrimination. We will not deny you service or charge you differently for exercising these rights.

To make a request, or to appeal a decision we have made about a request, contact us at help@vialscope.com. We will respond within the timeframe required by applicable law. We may need to verify your identity before acting on a request that concerns your account.

VialScope stores and processes data on managed cloud infrastructure located in the United States. If you access VialScope from outside the United States, you understand that your data will be processed in the United States, where data protection laws may differ from those in your location.

VialScope is a consumer product that you use directly. It is not a healthcare provider, health plan, or healthcare clearinghouse, and outside of a specific agreement it does not act as a HIPAA covered entity or business associate. The protections described in this policy come from our own commitments to you, not from HIPAA. You decide what to record and who to share it with, including whether to show your record to your own clinician.

VialScope records and displays your data. It does not interpret it, and it does not provide medical advice, diagnosis, or treatment recommendations. Decisions about your health are for you and your clinician.

VialScope is intended for adults and is not directed to anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

If we change this policy, we will update the effective date at the top of this page. For material changes, we will provide a more prominent notice, such as a message in the application or by email. Your continued use of VialScope after a change takes effect means you accept the updated policy.

For any privacy question or request, including access, correction, deletion, or an appeal, contact us at help@vialscope.com. You may also write to North West Maple, LLC, a New Jersey limited liability company. A postal address is available on request.