Last updated: September 8, 2026
VaporChart stores case records and clinical chart data in the app's local storage. The app has no account system, cloud chart sync, advertising, or analytics. The App Store candidate uses manual vital-sign entry and disables photo extraction. A separately configured evaluation build can offer on-device text recognition or optional cloud extraction.
Cloud extraction is off and unavailable unless a deploying administrator explicitly enables it and supplies an endpoint and access credential. When configured, the app shows a disclosure and requires explicit authorization for the upload before each extraction session. The selected image is then sent over an encrypted network connection to that endpoint.
The reference extraction service uses Cloudflare infrastructure as a request proxy and OpenAI's API for image processing. A deploying organization may configure a different approved endpoint. Service-side retention, access, and processing terms depend on the actual deployment, service plan, and contracts. A request setting that disables API response storage is not by itself a guarantee of zero retention or regulatory compliance.
A separately enabled evaluation feature can recognize text on the device. It shows the recognized text beside manually entered review fields. It does not automatically map monitor text to clinical values, and it does not send that image to an extraction server.
VaporChart requests camera or photo-library access only when you choose a related feature. Selecting or taking a photo does not add extracted values to a chart automatically; the user reviews, edits, verifies, and confirms them first.
Captures, proposed results, and extraction status are saved in protected local job storage while review or retry is pending. Closing a review does not discard the pending job. After the chart is successfully saved, source photos are removed by default; a user can opt to retain an image linked to the chart. Discard controls remove a pending capture. These stored photos and jobs are excluded from device backups.
Clinical records, monitor-photo files, and pending photo jobs use iOS file protection and are excluded from device backups. VaporChart does not provide cloud chart synchronization or automatic off-device recovery. Use a managed device, enable a strong device passcode, install security updates, and follow your organization's mobile-device policies.
VaporChart does not represent or certify that the app, an extraction deployment, or a user's workflow is HIPAA compliant. A healthcare organization must perform its own privacy and security review, determine whether required agreements are in place, configure eligible services, and establish appropriate access, retention, export, and incident-response policies before using VaporChart with protected health information.
The app provides controls for deleting local case records and monitor photos, subject to any in-app trash or recovery period shown to the user. Uninstalling the app removes its active local container from the device, subject to Apple platform behavior and any device backups controlled by the user or organization. Contact your deploying organization about deletion from any separately configured external service.
When a user exports or shares a chart, the recipient, destination app, and storage location are selected outside VaporChart's local chart store. Users are responsible for choosing an authorized destination and protecting the exported record.
VaporChart is intended for use by licensed healthcare providers and is not directed at children under 13.
We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date.
If you email us, your email address and the contents of your message are received through our email service so we can respond. Website availability and support links open your email app. Please do not include patient information in support messages.
If you have questions about this privacy policy, contact us at [email protected].