Privacy Policy

Last updated: August 20, 2026

Your health data stays on your phone.

What OnlyVitals reads

OnlyVitals reads only the HealthKit data types you select for your dashboard (for example Steps, Resting Heart Rate, or Sleep). It requests the HealthKit read permission for a data type only when you add that metric to your dashboard — never a blanket "all data types" request. OnlyVitals has no write access to Health at all; it only ever reads.

Where your data goes

Nowhere. OnlyVitals has no backend server, no analytics SDK, and no advertising SDK. All reading and calculation happens on-device. Nothing is uploaded, sold, or used for advertising.

Authorization

HealthKit authorization is a single, one-time system permission sheet presented by iOS the first time OnlyVitals needs to read a metric type. You can grant or deny access per data type in that sheet, exactly as HealthKit is designed to work.

Managing permissions

You can review or revoke any permission at any time via the Health app: Sharing tab > Apps > OnlyVitals, or via Settings > Privacy & Security > Health > OnlyVitals. Revoking a permission means the corresponding metric shows "No data available" instead of a value — nothing else about the app changes.

What this app is not

OnlyVitals displays the numbers HealthKit already has. It does not diagnose, treat, or offer medical advice, and it is not a substitute for professional medical guidance.

Account and payment

There is no account or sign-in. The optional lifetime unlock (com.korrali.justvitals.lifetime) is processed entirely by Apple's in-app purchase system (StoreKit); OnlyVitals never sees or stores payment details.

Changes to this policy

If this policy changes, the updated version will be reflected here, with the "Last updated" date above revised accordingly.