Built to be checked, not trusted blindly
Your protocol isn't our data.
Nothing on this page asks you to take our word for it. VialMath calculates from numbers you enter. It does not recommend a compound, dose or protocol. Every claim below comes with the way to check it yourself. Where a check needs a tool, it's a tool you already have: your browser.
01 · Check it yourself
What VialMath sends, and how to see it
Beyond loading its own files, the app makes exactly two kinds of request. Neither carries your protocol. Here is how to watch it happen.
- Open the app in a desktop browser. vialmath.app/app — no signup, so nothing about you exists before you start.
- Open the browser's developer tools and pick the Network tab. Chrome, Edge and Firefox: press F12 (or ⌥⌘I on a Mac). Safari: enable the Develop menu in Settings → Advanced, then Develop → Show Web Inspector.
- Use the app. Add a compound, log a dose, change a vial, export a backup. Watch the list. You will see
the app's own files load, and one request to
version.jsonwhen the app opens or comes back to the foreground. That request carries none of your data — no key, no identifier, nothing you entered. It exists so the app can tell you a newer build is out. - Activate Power, if you have it. You will see one call to Gumroad's license server,
api.gumroad.com. It carries your license key — plus our product's public ID and an instruction not to count the check as a use — and nothing about your protocol. It happens once, at activation. - Keep watching. That is the whole list. Calculations, schedules, history, exports — all of it runs on your device, and nothing of your protocol leaves it.
A request always carries what any web request carries at the transport level — your connection's address, standard headers. The claim is precise: the app adds nothing you entered to any request except your license key at activation, and that request goes from your browser to Gumroad, never to us — so we never see the address it comes from. We'd rather say that plainly than have you find it in the panel.
02 · What the app never does
No account, no cloud, no analytics in the app, no database, no advice.
No account, no sync, no cloud storage.
There is no login and no signup. Your protocol lives in your browser's local storage on the device you use. Nothing is mirrored to a server, because there is no server that holds it.
No analytics inside the app.
The app runs no analytics or tracking code, and it puts nothing you entered into any request except your
license key at activation. A few buttons in the app — "See what's in Power", the Buy links and "Set up
reminders" — open our website in a new tab. That page counts the visit the way our other public pages do,
and notes which button it came from as a fixed tag such as app-cycle-windows. That tells us
which features people are curious about; it never tells us who you are or anything you entered. Our public
web pages — this one, the home page, the free tools — keep only daily totals, with nothing that identifies
you. The details are in the
privacy policy.
No compound database, no recommendations.
Zero built-in compounds. You name everything you track. VialMath never suggests a compound, a dose or a range, never flags combinations, and never surfaces what other people group together. It computes what you entered; it never evaluates it. That boundary is permanent.
No alerts, by design.
Run-out and reorder-by dates are computed and shown in Today whenever you open the app. VialMath does not send notifications or reminders — it has nothing to send them from, and nothing that knows you exist.
03 · The tradeoff, stated
Local-first means you own the backup.
Nothing is on our servers — which is the privacy promise, and also means there is no cloud to restore from if you lose or replace the device, or clear the browser's site data. So the backup is one tap, and Today tells you when one is due.
Export your protocol, any time.
A JSON backup of your protocol and everything you have logged in it, from the Data view — one tap, free on every tier. Import a backup you exported from VialMath on the new device and your protocol and history come back. Your Power key is not in the file: keep it from your Gumroad receipt and enter it once in Settings on the new device. Entering it again does not use up an activation.
A calendar file too.
An .ics export of your scheduled doses, reorder dates and gate checks, for any calendar app. Also free, also one tap.
Today reminds you.
Once you have more than 20 entries across your dose log and metric log, Today shows a backup reminder if this device has no record of an export, or if the last one was 14 or more days ago. "Not now" hides it for 7 days. With 20 or fewer entries there is no reminder, so export once when you set up.
04 · The arithmetic
Run the exact test suite that gated this build.
Every build is released only after its own test suite passes on the code being served. That suite is public, and it runs in your browser against the same files the app loads — so what you check is what you use. The count below is stamped from that run by the release script, never typed by hand.
Run the exact suite that gated this build against the files the app serves.
The arithmetic contract the suite enforces, in one breath: a U-100 syringe has 100 units per millilitre; concentration is vial mass over water volume; the draw is dose over concentration, times 100; a blend's dose is quoted per component but one injection removes every component; every quantity has exactly one derivation, so two screens can never disagree. If you find a number that breaks any of that, tell us what you did and what you expected — max@vialmath.app — and read the changelog for what was fixed and when.
05 · What we deliberately don't claim
Precise beats impressive.
We don't say "most private" or "most secure" — those are comparisons nobody can check. We say what the app does and doesn't do, and we give you the panel to confirm it. We don't publish user counts or testimonials we can't stand behind. And we don't call VialMath medical software: it computes from the numbers you enter, and for anything medical the right person is the clinician who oversees your protocol.