What’s new
Everything that ships in Vitals, by week. Written for the people who use it, not for engineers, and honest about which changes are security work.
Week of 7 September 2026
Your consent before anything goes overseas
The app now asks for written consent before any health information is sent to the overseas AI provider, names both disclosures, and records your answer with a timestamp. Withdrawing consent is recorded the same way, and no AI request is made without a current consent on file.
An access audit log
Every read or change to a record is written to an append-only log: who, when, and on which route. The log holds no health information and the app cannot edit its own entries.
Change your password in the app
A password change panel in Settings. Changing it signs out every other session immediately.
Health data is never cached by the browser
Every route that returns health information now tells the browser not to store it, so nothing lingers in a shared computer’s cache after you sign out.
A ceiling on Apple Health imports
Very large syncs are capped so a runaway export cannot exhaust the service.
AI context clarified
The site now distinguishes what contributes to an AI explanation: relevant wellness traits can be included, while clinical genetic findings are excluded. The security page explains those controls.
This website moved to its own home
www.vitalshealth.com.au is now a separate site from the app at app.vitalshealth.com.au. Nothing on these pages can touch your health record: the marketing site carries no database, no sign-in and no AI.
Week of 17 August 2026
Sign-in revoked when you change your password
Every existing session is invalidated the moment your password changes, and the check runs on every page and every request, not just at sign-in.
Cross-site write protection
The app now refuses any data-changing request that did not originate from the app itself, closing off cross-site request forgery.
Row-level isolation in the database
Your records are separated from everyone else’s inside the database itself, not only in application code. The app connects as a role that cannot bypass those rules.
A published way to report security issues
We now publish security.txt and a responsible-disclosure policy with response commitments.
Week of 10 August 2026
Find any reading faster in Trends
Search, category chips, an out-of-range toggle and sorting on the Trends page, plus a single dropdown for the category filter with an ‘All readings’ option.
Bigger tap targets
Back links and the three primary navigation controls now meet a 44 px touch target.
Week of 3 August 2026
Dependency scanning in every build
Builds now fail on any high or critical advisory in a production dependency, and updates arrive as grouped pull requests.
Platform upgrade
Moved to the current major versions of the web framework and UI library underneath Vitals.
Original reports render again
Fixed a case where a strict security header stopped the original PDF from displaying inside the app.
Week of 27 July 2026
Trend charts you can actually read
Axis labels now land on round numbers and calendar boundaries; dense wearable data is smoothed over a faint raw line; and you can scrub a 1-month to all-time window with drag, swipe or arrow keys.
Long pathology reports no longer drop analytes
Multi-page reports are now extracted in full.
A medication discussed is not a medication taken
Consult notes now clearly separate medications mentioned in conversation from your actual medication list, so nothing discussed is mistaken for a current dose.
Week of 20 July 2026
Cross-source insights
Vitals can point out when readings from different sources moved together over the same period, and hand you the question to ask your doctor about it.
Voice consult capture
Record, upload or paste a consultation; Vitals transcribes it and drafts a structured note you review and keep.
Ask about your medications
A plain-language chat box on the Medications section, grounded in your own list.
Invitation-only sign-up
Registration is closed behind an invitation list while Vitals is in private preview, with a proper onboarding path for invited people.
Week of 13 July 2026
Edit medications, with dose history
Change a dose and Vitals keeps the history of what changed and when.
Scan a supplement label
Photograph a multi-ingredient supplement and Vitals identifies each ingredient and amount.
IgG4 food panels
The other half of the allergy and intolerance picture, alongside IgE.
Automated checks on the AI’s safety behaviour
An evaluation harness now verifies, on every change, that the AI holds its non-diagnostic boundaries.
Have a suggestion?
Vitals is shaped by the people using it. Tell us what would make your record more useful, or request access.
Last updated