Last updated: August 20, 2026
Your health data stays on your phone.
Vitals reads only the HealthKit data types you select for your dashboard (for example Steps, Resting Heart Rate, or Sleep). It requests the HealthKit read permission for a data type only when you add that metric to your dashboard — never a blanket "all data types" request. Vitals has no write access to Health at all; it only ever reads.
Nowhere. Vitals has no backend server, no analytics SDK, and no advertising SDK. All reading and calculation happens on-device. Nothing is uploaded, sold, or used for advertising.
HealthKit authorization is a single, one-time system permission sheet presented by iOS the first time Vitals needs to read a metric type. You can grant or deny access per data type in that sheet, exactly as HealthKit is designed to work.
You can review or revoke any permission at any time via the Health app: Sharing tab > Apps > Vitals, or via Settings > Privacy & Security > Health > Vitals. Revoking a permission means the corresponding metric shows "No data available" instead of a value — nothing else about the app changes.
Vitals displays the numbers HealthKit already has. It does not diagnose, treat, or offer medical advice, and it is not a substitute for professional medical guidance.
There is no account or sign-in. The optional lifetime unlock (com.korrali.justvitals.lifetime) is processed entirely by Apple's in-app purchase system (StoreKit); Vitals never sees or stores payment details.
If this policy changes, the updated version will be reflected here, with the "Last updated" date above revised accordingly.
Korrali LLC
Email: privacy@korrali.com