Privacy Policy

Transparency about how we handle your critical safety data.

Last Updated: 8 December 2025

At inCaseOfEmergency.tech, we respect your privacy and are committed to protecting your personal data. This privacy policy explains how we look after your personal data when you use our service and tells you about your privacy rights.

1. The Data We Collect

We collect only the information necessary to provide emergency identification services:

  • Identity Data: Full name, username (email address).
  • Medical Data (Special Category): Blood type, allergies, medical conditions, and medications.
  • Emergency Contact Data: Name, relation, and phone number of your next of kin.
  • Insurance Data: Policy numbers, provider details, and uploaded document files (PDF/Images).

2. How We Use Your Data

We process your data for a single purpose: Vital Interest. The system allows First Responders and Medical Personnel to access your critical information instantly via your unique QR code in the event that you are incapacitated.

We do not sell, trade, or analyze your data for marketing purposes.

3. Public Access via QR Code

⚠️ IMPORTANT WARNING:
By using this service, you explicitly acknowledge that any person who scans your unique QR code can view the emergency profile you have created. This is a fundamental feature of the system designed to save time in life-threatening situations.

4. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. This includes:

  • Password Hashing: Your password is securely hashed and never stored in plain text.
  • File Protection: Uploaded insurance documents are not publicly indexable and are served via a secure proxy script.
  • Tokenization: Your public profile is accessed via a random, cryptographic token, not your username.

5. Data Retention & Deletion

We maintain your data indefinitely to ensure your QR code remains active for as long as you need it. However, you have complete control:

  • You may edit your data at any time via the Dashboard.
  • You may delete your account permanently via the "Delete Account" button. This action immediately wipes your database record and physically destroys all uploaded files from our servers.

6. Your Legal Rights (GDPR)

Under data protection laws, you have rights including:

  • Right to Access: You can view all your data by logging into your dashboard.
  • Right to Portability: You can download a machine-readable JSON file of your data from the dashboard.
  • Right to Erasure: You can permanently delete your account at any time.