VitalRoute Privacy Policy

Last updated: September 30, 2026

VitalRoute is built so that your health data moves only at your command, to a destination you choose. This policy explains exactly what happens to your data.

The short version

The developer operates no servers, collects no data, and receives nothing from VitalRoute. Health data leaves your device only when you configure a destination and sync, and it goes to that destination — not to the developer.

What data VitalRoute accesses

VitalRoute reads from Apple Health (HealthKit) only the metrics you explicitly enable in the Health Data screen. Nothing is selected by default. Access is read-only: VitalRoute never writes to, modifies, or deletes anything in Apple Health. iOS shows a permission prompt for each data category, and you can revoke access at any time in Settings.

What data leaves your device

Health records for the metrics you selected are uploaded, over HTTPS, to the endpoint you configure. That endpoint is yours (or your household's) — typically a self-hosted receiver running on your own hardware. Records are transmitted only when you tap Sync Now, or automatically if you explicitly enable Automatic Sync in Settings.

What the developer collects

Nothing. VitalRoute has no analytics, no advertising, no crash reporting, no accounts, no sign-in, and no developer-operated backend. The developer never sees your health data, your endpoint address, or your API key.

Data stored on your device

• Your destination URL and API key are stored in the iOS Keychain.
• Your selected metrics are stored in standard app preferences.
• When Automatic Sync is on, records waiting to be delivered are held in a data-protected queue in your app's container, excluded from backups, and deleted as soon as your receiver acknowledges them.

Third parties

VitalRoute contains no third-party SDKs and communicates with no service other than the endpoint you configure. Your data is never sold, shared, or used for advertising or tracking of any kind.

Deleting your data

Records already delivered live on your receiver, under your control — delete them there, or turn the receiver off. Deleting the app from your device removes the stored destination, API key, selection preferences, and any undelivered queue contents.

Children

VitalRoute is a general-audience utility and does not knowingly collect personal information from anyone, because it does not collect information at all.

Contact

Questions about this policy can be raised on the project issue tracker.

Changes

If this policy changes, the updated date above will change with it.