Privacy Policy

1. Overview

vialfile ("we", "us", "our") operates the website at vialfile.com (the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data.

vialfile is a tracking tool for peptide therapy management — reconstitution math, injection logs, side-effect tracking, and bloodwork cadence reminders. The primary design principle is your health data stays on your device. We do not want access to your medical information and have architected the product accordingly.

2. Data we collect and where it lives

2.1 Data that stays on your device (localStorage)

All peptide tracking data — injection logs, side-effect records, bloodwork protocols, inventory, and stack configurations — is stored exclusively in your browser's localStorage. This data:

• Never leaves your device under normal use
• Is not sent to our servers
• Is not accessible to us
• Persists until you clear your browser data or use the in-app "Clear all" function
• Can be exported via Settings & Backup as a JSON file that you control

The localStorage keys vialfile uses are: vialfile-log-v1, vialfile-sideeffects-v1, vialfile-bloodwork-v1, vialfile-stack-v1, vialfile-inventory-v1.

2.2 Waitlist email (if provided)

If you enter your email address on the waitlist form, we collect and store that email address. We use it solely to:

• Notify you when early access opens
• Send product updates you can opt out of at any time

We do not sell, share, or use your email for advertising. We will delete your email on request (see Section 7).

2.3 Server access logs

Our web server (Caddy) records standard HTTP access logs: IP address, request path, timestamp, HTTP status code, and User-Agent string. These logs are used solely for diagnosing server issues and estimating aggregate traffic. They are retained for no more than 30 days and are not shared with third parties.

2.4 No third-party analytics or tracking

vialfile does not use Google Analytics, Meta Pixel, Mixpanel, or any third-party behavioral tracking script. There are no advertising trackers on this site.

3. Cookies

vialfile does not use cookies. All client-side persistence is via localStorage, which is not transmitted to servers with HTTP requests and is not a cookie.

4. Data security

All connections to vialfile.com are served over HTTPS/TLS. Your browser's localStorage is sandboxed to the vialfile.com origin — other websites cannot access it. We do not store your health tracking data on our servers, which is the most effective way to protect it from server-side breaches.

5. Children's privacy

vialfile is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

6. International users

vialfile is hosted in the European Union (Frankfurt). If you access the Service from outside the EU, your connection data (IP address, timestamps) passes through EU infrastructure. We process the small amount of data we do collect in compliance with applicable privacy law.

EU / EEA users: Under GDPR, you have rights to access, correct, and erase personal data we hold about you (specifically, your waitlist email address — we do not hold any health tracking data). See Section 7.

California residents: Under CCPA, you have the right to know what personal information we collect, to delete it, and to opt out of sale (we do not sell personal information).

7. Your rights and how to exercise them

To request access to, correction of, or deletion of personal data we hold (waitlist email), contact us at privacy@vialfile.com with the subject line "Privacy Request". We will respond within 30 days.

To delete your health tracking data, use the "Danger zone — Clear all data" section in Settings & Backup. This is immediate and cannot be undone.

8. Changes to this policy

If we make material changes to how we handle personal data, we will update the "Last updated" date at the top of this page. Continued use of the Service after a change constitutes acceptance of the updated policy.

9. Contact

Questions about this policy: privacy@vialfile.com

vialfile is operated by the Startup Factory autonomous agent program. For operator-level inquiries, use the contact information at @bitinvestigator.