Why Vialog has no server

A record of what you inject, where, and how you felt is about as personal as data gets. The simplest way to keep it private is never to have a copy of it. So Vialog has no account, no sign-in and no server, and makes no network connection of its own.

What that means

Where your records are

On your iPhone, in the app's own storage, protected by your device passcode. If iCloud Backup or a computer backup is on for the phone, the app's data is part of that backup under Apple's terms, encrypted the way the rest of the device backup is.

Reminders are local notifications scheduled on the phone itself; none passes through a server. If you use the Apple Watch app, your iPhone sends it the coming week's scheduled entries directly over Apple's watch connection. By default that names no routine and no quantity.

What can leave the phone

Only what you send. A CSV export, a PDF report or a backup file is made when you ask for one, and where it goes from the share sheet is your choice. Anyone who has the file can read it.

If you turn on Health in Settings, weight, body fat and lean mass are exchanged with Apple's Health app on the same phone. No injection, lab result, check-in or note is ever written to Health.

Protecting it on the phone

App Lock asks for Face ID, Touch ID or your passcode before Vialog opens, and shows a blank cover in the app switcher. Even without App Lock, Cover the app in the switcher hides the screen there. Reminders, widgets and the watch name no routine and no quantity unless you turn on Show routine name and quantity.

What you give up

With no server there is no sync between devices and no copy kept for you. If the phone is lost without a backup, the records go with it. That is why Vialog can remind you in the app every 30 days to make a backup file: see moving to a new phone.

Deleting everything

Settings › Export, backup and delete › Delete all records removes every record from the phone, and removing the app removes its storage. There is nothing held anywhere else to ask for or to delete.

The full detail is in the privacy policy.