Yolovial
Privacy policy — last updated 9 August 2026
This Privacy Policy explains how Great Basin Software LLC ("we," "us," or "our") handles information in connection with the Yolovial peptide dose and reconstitution tracker (the "Service") at yolovial.com. Yolovial is a trading name of Great Basin Software LLC.
Yolovial is a personal tracker. The data in it is yours, it is stored so that you can get it back, and it is not sold, shared, or used to advertise to you.
The short version. We store your email address, the vials and schedules you enter, the doses you mark as taken or skipped, and — only if you connect it yourself — your sleep totals. Nothing is sold or shared with advertisers. Ask and it is deleted.
What is stored
| Data | Why | Where it comes from |
|---|---|---|
| Email address | Identifies your account so your records come back when you sign in | You, or your Google account if you sign in with Google |
| Your vials — compound name, amount, water, draw, schedule, cycle, start date, notes | It is the app. The numbers on your screen are computed from these | You type them |
| Dose log — which dose you marked taken or skipped, and when | So the app can tell what actually happened rather than assume | You tap it |
| Sleep totals — time asleep, stage minutes, wake count, per night | Shown as a trend and compared against compounds that plausibly affect sleep | Google Health, and only after you explicitly connect it |
What is not stored
- No name, address, phone number, or date of birth.
- No payment details — the app takes no payments.
- No location, contacts, photos, or files.
- No advertising or analytics trackers. There is no third-party analytics script on the site or in the app.
- No password. Sign-in goes through Google or a one-time access code, so there is no password here to leak.
Sleep data, specifically
Sleep is optional and off until you turn it on. If you connect Google Health, Yolovial requests one read-only scope — sleep — and reads nothing else. No health data is ever written back to Google.
The connection is stored as a refresh token, encrypted at rest. Disconnecting it in the account menu deletes that token and stops the sync. You can also revoke Yolovial's access directly in your Google account permissions.
Sleep figures are used to draw your own trend and to compare nights against compounds you are running. They are not sent to advertisers, not sold, and not pooled with other users.
Who else sees it
Three processors, each doing one job:
- WorkOS — handles sign-in. It sees your email address.
- Railway — hosts the server and its storage volume, where your records live.
- xAI (Grok) — only when you press "Second opinion", and only then. It receives the short findings Yolovial has already computed — sentences like "two compounds overlap on Tuesday" — and no account identifier. If you never press the button, nothing is ever sent.
That is the whole list. Your data is not sold, rented, or shared for advertising, and there is no advertising in the app.
How long it is kept
Your records stay until you delete them, because a tracker you cannot look back through is not much of a tracker. Delete a vial and it goes. Ask for your account to be removed and everything attached to that email is deleted, including the dose log and any sleep history.
Getting it back or getting rid of it
Email [email protected] and ask for a copy or a deletion. There is no form to fill in. A deletion request removes the account, its vials, its dose log, its sleep history, and the stored Google connection.
Security
Everything travels over HTTPS. Session cookies are signed, marked HTTP-only, and cannot be read by scripts. The Google refresh token is encrypted at rest with AES-256-GCM. The app runs under a strict Content Security Policy, which is the browser-level reason no third-party script can execute on the page.
This is not medical advice
Yolovial does arithmetic on numbers you supply and shows you your own history. It does not recommend a dose, a compound, or a protocol, and it deliberately ships no dosing figures of its own. Every number you see either came from you or was computed from what you entered. Nothing here is medical advice — talk to a clinician.
Children
Yolovial is not intended for anyone under 18 and is not directed at children.
Changes
If this policy changes in a way that affects what is collected or who sees it, the date at the top changes and anyone with an account is emailed. Quiet rewrites of a privacy policy are a bad habit and we are not going to have it.