Vialora Privacy Policy

Effective August 1, 2026

Vialora is a protocol-tracking service operated by Eisen Labs. This policy explains what information Vialora handles, why it is used, and the choices available to you.

Information you provide

We process account details and the information you choose to enter or import, including protocol schedules, dose and injection-site logs, vial inventory, cycle and titration settings, weight and body measurements, daily check-ins, symptoms, private progress photos, notes, and CSV or backup data. Accounts begin empty; Vialora does not preload personal health records.

Connected health data

If you explicitly enable a connection, the native Vialora apps can request read-only access to body weight, body-fat percentage, sleep sessions, and resting heart rate from Apple Health or Android Health Connect. Vialora uses selected records to show health context alongside your protocols and to synchronize that context across your signed-in devices. You can deny individual permissions, disconnect a provider, or delete imported provider records.

Vialora does not use connected health data for advertising, marketing, credit or insurance decisions, data brokerage, or sale. We do not write protocol or dose data back to Apple Health or Health Connect.

How information is used

• Provide, synchronize, secure, troubleshoot, and improve Vialora.
• Authenticate your account and prevent unauthorized access.
• Generate exports, reports, schedules, and share links that you request.
• Comply with law, enforce our terms, and respond to security incidents.

Photos and camera access

Vialora requests camera or photo-library access only when you choose to add a progress photo. Selected photos are stored privately for your signed-in account and shown through time-limited links. They are not public, used for advertising, or shared unless you explicitly export them. Progress photos are never included in Vialora share links. You can delete individual photos at any time.

Service providers and disclosure

Vialora uses Supabase for authentication and protected database services, Vercel for application hosting and server functions, RevenueCat for subscription entitlement management, and Apple or Google when you choose their sign-in, health-platform, or in-app purchase services. These providers process information only to deliver their services to Vialora. Apple and Google process purchase transactions under their own privacy policies; Vialora and RevenueCat receive transaction, product, entitlement, renewal, cancellation, and refund status rather than full payment-card details.

Vialora may record limited product events and technical diagnostics, such as feature actions, app version, platform, error messages, and request timing, to operate and improve reliability. These records are not used for advertising and are not combined with connected health data for marketing.

We may also disclose information when required by law, to protect users or the service, or as part of a business transaction with appropriate notice and safeguards.

Storage and security

Account and application data is transmitted over encrypted connections and stored in per-user cloud records and private object storage protected by access controls. Native sign-in credentials are stored using the operating system's secure credential storage. No system can guarantee absolute security, but we limit access and use safeguards appropriate to the data.

Retention and your choices

We retain account data while your account is active and as reasonably necessary to provide the service, meet legal obligations, resolve disputes, and protect the service. You can correct records in Vialora, export your data, disconnect a health provider, delete imported provider records or progress photos, or request account deletion. Account deletion removes progress photos stored by Vialora. You may also have rights to access, correct, delete, or receive a portable copy of personal information, depending on where you live.

Children

Vialora is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

Medical and HIPAA notice

Vialora is a personal tracking tool, not a medical device, healthcare provider, or medical-record system, and is not offered as a HIPAA-compliant service. It does not provide medical advice, diagnosis, treatment, dosing recommendations, or medication sourcing. Consult a qualified healthcare professional about health or protocol decisions.

Contact

Questions, privacy requests, and account-deletion requests can be sent to support@eisenlabs.io.

See also the Vialora Terms of Use, Vialora Support, and account-deletion instructions.

We may update this policy as Vialora changes. Material changes will be identified by a new effective date and, when appropriate, an in-app or account notice.