Consumer Health Data Privacy Policy

• Medical details you choose to add to a tag’s emergency profile: blood type, allergies, medical conditions, medications and free-text notes. All of it is optional; a tag works without any of it.
• Records of scans of your tag, including whether your medical details were shown, kept as your own access history.
• Your consent choices about medical details: what you chose and when.
• Emergency alerts. When someone flags an emergency on your tag, the alert we send names the account holder and says someone with them may need help. That is an inference about someone’s health, not something you typed.

To show your chosen medical details to someone who scans your tag, so they can help you or tell a first responder; to send emergency alerts; and to keep your access and consent history. It can also be captured incidentally in an error report when something goes wrong while a page holding it is being shown, as described in section 4. Never for advertising, marketing, analytics or profiling: our analytics tool records nothing on the medical screens, even if you have accepted analytics.

From the account holder who types it in (see section 5 if that is not you), and from the emergency alert we generate. We do not buy health data, collect it from other companies or infer it from anything else.

• The person who scans your tag sees the medical details you chose to show, so they can help you or pass them to a first responder.
• Your emergency contacts who have accepted receive the emergency alert: the account holder’s name and that someone with them may need help. They are not shown the medical details you saved, but they can read messages from the person who scanned the tag, which could repeat those details.
• Service providers process it on our behalf, as described below.

We do not sell consumer health data and will not without the signed authorization the law requires (we have no intention of seeking one). We do not share it with affiliates (we have none) or third parties for their own purposes. No third party collects health data about you over time or across other websites or online services through TyraTag. It is processed on our behalf and on our instructions, never for a provider’s own purposes, under each provider’s published data-processing and security terms, and only by the infrastructure processors needed to deliver the service: Supabase, Inc. (encrypted database hosting), Vercel, Inc. (page rendering), Sentry (Functional Software), Inc. (error monitoring), and Twilio Inc. (message delivery). Sentry is listed because if the app throws an error while rendering a page that contains health data, the error report can capture it: our scrubbers remove emails, phone numbers, and known medical/critical form fields (blood type, allergies, conditions, medications, notes). A medical note that appears only as unstructured text in an error message is not reliably matched and may still reach Sentry in the United States. Twilio is listed because an emergency alert names the account holder and says their tag was flagged as an emergency and that someone with them may need help, which is itself an inference about someone’s health; that alert never contains blood type, allergies, conditions or medications. In our database these fields are stored with field-level AES-256-GCM encryption; a copy that reaches an error report is not encrypted by us.

We collect medical details only with express consent, given separately from our other terms: the account holder ticks a dedicated box when saving them. If the details describe another adult, the account holder confirms that person asked them to add it. For someone under 18, a parent or legal guardian consents on their behalf. You can withdraw consent in Settings at any time, which stops the details being shown to anyone who scans the tag while they stay in the profile, or clear them, which deletes them.

You can confirm whether we collect, share or sell consumer health data about you, get a copy of it and the list of who it has been shared with (section 4), and:

• Correct it: edit any medical detail on the tag’s Medical info screen, at any time.
• Delete it: clearing the details on that screen deletes them at once. If you ask us by email instead, we delete them within 30 days of confirming the request is yours, and tell any provider that may hold a copy, such as our error-monitoring service, to delete it too. Copies in our database provider’s encrypted backups expire on their own, always within six months.
• Withdraw consent in Settings (section 5).

If someone else added health details about you, you can use these rights too: email us. For anything you cannot do on the screen, email support@tyratag.com (from your account email if you have one); we authenticate against your existing account and never require a new one. We respond within 45 days (extendable once by 45 days with notice). If we decline, we tell you why.

To appeal, reply to our decision with “Appeal” in the subject line. We answer appeals in writing within 45 days, with our reasons. If we deny your appeal, you can complain to your state’s Attorney General: Washington, Nevada or Connecticut (choose “Consumer Data Privacy”). We never treat you differently for exercising these rights.

We post every change here with a new effective date. If a change is material, we email account holders before it takes effect, and we ask for your consent again before using health data for a new purpose or sharing it with a new kind of recipient.

TyraTag Inc. · Winnipeg, Manitoba, Canada · support@tyratag.com