A GLP-1 tracker with no account and no cloud
Most tracking apps ask you to create an account before you can log a single shot. That is a design decision, not a technical requirement — and for a record of what you inject and what it does to you, it is worth understanding what you are agreeing to.
What "no account" actually means
Vialume has no sign-up screen because there is nothing to sign up to. There is no Vialume server holding your records, no username attached to them, and no password that could be leaked. What you log is written to a database file inside the app's private storage on your phone, and it stays there.
The practical consequences are worth being precise about, in both directions:
- Nobody at Vialume can read your records. Not as a promise of good behaviour — there is simply no copy to read.
- There is no data breach that exposes your medication history, because the history was never collected in the first place.
- Nothing to delete on request. Uninstalling removes the database.
- The flip side: nobody can restore it for you. If you lose the phone with no backup, the records are gone. This is the real cost of local-only storage, and it is why the app can export everything to a single file at any time.
Backups are yours to hold
Because there is no cloud, backup is something you do deliberately. Vialume exports your entire history as one JSON file, and separately as CSV, whenever you ask. Where it goes is your choice — your own drive, your own storage, a folder on the phone. The paid tier can write that backup automatically into a folder you nominate, on the device, on a schedule.
Keep one somewhere you will still have access to if the phone is lost. That is the honest trade for keeping the data out of anyone else's system.
What does leave the device, stated plainly
Claiming "nothing ever leaves your phone" without qualification would be dishonest, so here is the complete list:
- If you buy the paid subscription, the purchase is processed by Google Play, and a subscription service receives a purchase token and a random, anonymous identifier so the app knows whether to unlock the paid features. It receives no health records and no Vialume account, because neither exists.
- If you turn on Health Connect, weight can be shared with the Android health platform on your device, and step counts read from it. That is a permission you grant explicitly and can revoke in Android settings.
- If you export or share a file, it goes wherever you send it.
There is no analytics SDK, no advertising identifier, no crash-reporting service and no tracking of any kind. The full detail is in the privacy policy.
How to check any health app for yourself
You do not have to take anyone's marketing at face value, including ours. On Google Play, every app has a Data safety section, and it is the most useful thirty seconds you can spend before installing a health app:
- Open the Play listing and scroll to "Data safety". It lists what the developer says they collect and share.
- Look for "Health and fitness" under collected data. If a tracker collects it, your logs are going somewhere.
- Check "Data shared with third parties". Sharing is a stronger claim than collecting, and worth reading closely.
- Look for an account requirement. If the app cannot be used without signing in, the records are almost certainly server-side.
- Check whether you can export. An app that will not give you your data back is one you cannot leave.
Run that on any tracker you are considering — the answers vary more than you would expect.
Why this app was built this way
Vialume was written by one developer who is on a GLP-1 and wanted a tracker that did not require handing a medication history to a company that might be acquired, breached, or simply change its policy in three years. Local-only was the starting requirement, not a feature added later — which is why there is no account to delete and no server to trust.
Every chart of your own data is free, permanently. The paid tier adds things the app does for you — reminders, a doctor-ready PDF, automatic backups — never access to what you already typed in.
