Privacy Policy

By continuing, you consent to the collection, storage, processing, and use of your personal and medical information as described in this RescuQR Privacy Policy.

You understand and agree that RescuQR may collect and process:

• Full Name
• Date of Birth
• Gender
• Profile Photograph (optional)
• Phone Number
• Email Address
• Residential Address (optional)

• Emergency Contacts
• Relationship Information
• Preferred Hospital
• Treating Physician Details (optional)

• Blood Group
• Allergies
• Current Medications
• Chronic Medical Conditions
• Previous Surgeries
• Disabilities
• Organ Donor Status (optional)
• Medical Notes
• Uploaded Medical Reports and Prescriptions

• Device Information
• IP Address
• Browser Information
• Operating System
• App Version
• QR Scan Logs
• Approximate Device Location (only when required for emergency features and with your permission)

When someone scans a RESCUQR code, we record the scan time, IP address, browser or device information, and approximate location only when the scanner permits location access. If the scanner verifies their mobile number, we also collect their name, phone number, and optional photograph.

We use this information to provide emergency access, alert the profile owner and their contacts, prevent abuse, and maintain a safety record. Scanner identity and photographs are visible only to the relevant profile owner through protected links and to authorized RESCUQR administrators. Hospital access is limited to an active dispatch or a short emergency-access window after an authorized hospital scan.

Scanner records are retained only as long as reasonably needed for safety, support, fraud prevention, and legal obligations. A scanner may contact RESCUQR to request access, correction, or deletion where permitted by law.

Under India's Digital Personal Data Protection Act, 2023 you have the rights below. All of them can be exercised yourself from Settings → Privacy & Data inside the app, or by writing to our Grievance Officer.

• Right to information: know what we hold about you and who we share it with.
• Right to access: download a machine-readable copy of your data at any time.
• Right to correction, completion and updating of inaccurate information.
• Right to erasure: delete your account and data, except records tax and accounting law require us to keep.
• Right to withdraw consent for any optional purpose, as easily as it was given.
• Right to nominate another person to exercise these rights if you die or become incapable.
• Right to grievance redressal before approaching the Data Protection Board of India.
• Control over which fields are visible when your QR code is scanned.

We only use your information for the purposes you agree to when you sign up, each listed separately so you can accept or refuse them individually:

• Emergency display — showing your chosen details when your QR code is scanned. This is the core purpose of the service; without it the product cannot work.
• Emergency contact alerts — notifying your contacts by SMS, call or email when your code is scanned or you raise an SOS.
• Location for ambulance help — using your location when you ask for ambulance or roadside assistance.
• Community — publishing what you choose to post in the community area.
• Service messages — order updates, reminders and account notices.
• Promotional messages — offers and product news. Entirely optional and off unless you choose it.

Withdrawing consent for emergency display stops your medical details from being shown to a rescuer; only your name will appear. Withdrawing consent does not affect anything lawfully done before the withdrawal.

We ask for your date of birth at sign-up. If you are under 18, a parent or guardian must confirm consent using a one-time code sent to their mobile number before your medical details can be displayed to a rescuer. Until then only your name is shown. We never use a child's data for advertising, tracking or behavioural profiling, and promotional messages are not available on under-18 accounts.

We keep each type of information only as long as it is needed, and a nightly automated clean-up deletes anything older:

• Scan history: 12 months.
• One-time passcodes: 24 hours.
• Ambulance and SOS requests: 2 years.
• Assistance requests: 90 days.
• Admin alerts: 90 days.
• Data-download files: 7 days.
• Order, invoice and payment records: 8 years, because tax and accounting law requires it.
• Profile, medical record, contacts and documents: for as long as your account is open, and deleted when you delete your account.

We do not sell your data. We share only what is necessary with service providers acting on our instructions: hosting and database (Supabase, Cloudflare), SMS delivery, email delivery (Resend), payments (Razorpay), and maps and location services (Google). Your emergency details are shown to whoever scans your code — that is the purpose of the product — and to hospital staff only through a verified dispatch or a scan they performed, for a limited time.

Data is stored on managed cloud infrastructure. We do not transfer personal data to any country restricted by the Central Government under the DPDP Act.

Access to personal data is restricted by role, protected by row-level database rules, and every staff view of a person's record is logged. If a personal data breach occurs we will notify affected users and the Data Protection Board of India without delay, describing what happened, the likely consequences and the steps we have taken.

Grievance Officer: [Name to be filled], RescuQR.
Email: grievance@rescuqr.com
You can also raise a complaint in the app under Settings → Privacy & Data and track its status with the ticket number we issue. We acknowledge complaints within 7 working days and respond within 30 days. If you are not satisfied, you may approach the Data Protection Board of India.

You expressly authorize RescuQR to display the emergency information you have chosen to share when your registered QR code is scanned during an emergency. Depending on your settings, this may include:

• Your Name
• Blood Group
• Allergies
• Medical Conditions
• Current Medications
• Emergency Contacts
• Critical Medical Notes

This information is intended solely to assist emergency responders in providing timely care.

RescuQR uses commercially reasonable administrative, technical, and organizational safeguards to protect your information, including encrypted transmission, secure authentication, access controls, and continuous monitoring. While we strive to maintain a secure environment, no online service can guarantee absolute security.

RescuQR is a digital emergency information platform.

RescuQR does not:

• Provide medical advice
• Diagnose illnesses
• Prescribe medication
• Replace licensed healthcare professionals
• Guarantee emergency response
• Operate ambulances or hospitals

Always contact your local emergency services immediately in the event of a medical emergency.