MEDICALQR
Create Medical ID
PRIVACY POLICY

Your information. Your control.

MedicalQR.tech (“MedicalQR,” “we,” “us”) is operated by Divoti Inc., 330 Rancheros Drive, Unit 106, San Marcos, CA 92069. This policy explains what information we collect through the MedicalQR website and app, how we use it, when it is shared, and the choices you have. It applies to MedicalQR account holders (“you”), to the emergency contacts you add, and to people who scan a MedicalQR code.

Last updated November 3, 2026 · MedicalQR.tech is operated by Divoti Inc.
01

Information we handle

MedicalQR stores the information you choose to add to your account and Medical ID:

  • Account details, such as your name, email address and profile photo.
  • Medical ID details, including conditions, allergies, medications, care team, insurance and directives.
  • Emergency contacts: each contact’s name, mobile number and/or email address, the access level you assign, and the date and time you confirmed the contact agreed to receive alerts.
  • QR and activity information, including scan time, the profile type accessed, and location when the person scanning chooses to share it.
  • SMS records: messages we send, delivery status, and opt-out (STOP) or help (HELP) replies.
  • Device and app information needed to keep the Progressive Web App secure and reliable.
02

How information is used

We use information to:

  • provide your Medical ID and display the profile version you authorize;
  • manage your QR code and account access;
  • notify your emergency contacts by text message or email when your QR code is scanned;
  • show you relevant activity and notifications; and
  • keep the service secure and meet legal obligations.

Medical information is not used for advertising or sold to data brokers.

03

Sharing and profile access

You control access through Comprehensive Profile, Limited Emergency Profile and Notification Only permissions. Limited Share fields remain private unless you turn them on.

A person who scans an active QR code may see the emergency profile connected to that code. Trusted contacts can only access the profile level assigned to them.

We use service providers to host the service and deliver email and text messages. They process information only on our behalf, to provide those services. We may also disclose information when required by law or to protect someone’s safety.

We do not sell personal information. Mobile numbers and text messaging opt-in data are excluded from all sharing described in this section; see section 04.

04

SMS alerts

What we collect. When you add an emergency contact who will receive text messages, we collect the contact's name and mobile number. We also record that you confirmed the contact agreed to receive MedicalQR SMS alerts, and when you confirmed it. When a contact replies to our messages, we record STOP, START and HELP replies.

How we use it. We use emergency contacts' mobile numbers only to send:

  • a one-time text telling the contact they were added, with opt-out and help instructions; and
  • an alert each time your MedicalQR code is scanned, with the scan time, approximate location when available, and a secure link to the profile you allow that contact to see.

We do not send marketing or promotional text messages.

Frequency and cost. Message frequency varies with how often the QR code is scanned. Message and data rates may apply.

Opting out. A contact can reply STOP at any time to stop all MedicalQR text messages, or HELP for help. After a STOP reply we send one confirmation and no further texts unless the contact replies START. You can also remove a contact or turn off their text alerts in your account. Full program terms are in our SMS Terms.

No sharing. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from all other sharing categories in this policy and will not be shared with or sold to any third parties. Our SMS provider processes mobile numbers only to deliver our messages.

05

Location permission

The emergency scan page may ask the person scanning to share their location, so trusted contacts can understand where help may be needed. Sharing location is optional, and emergency information stays available if permission is declined. The browser or device controls the permission prompt, and it can be changed later.

06

Security and retention

MedicalQR uses authenticated access, privacy-based profile views and session controls. No system can guarantee absolute security, so use a unique password and protect devices that stay signed in.

We keep information while your account is active or as needed to provide the service, meet legal obligations, resolve disputes and protect the service. SMS opt-out records are kept so we continue to honor them.

07

Your choices

You can review and update your Medical ID, sharing permissions, emergency contacts and message preferences in the app. You can:

  • turn Limited Share fields on or off;
  • change a contact’s access level, or turn their text or email alerts on or off;
  • remove an emergency contact;
  • continue without sharing scanner location;
  • export available account information; and
  • request account deletion through account settings.

Emergency contacts can stop text messages at any time by replying STOP.

08

Children’s privacy

MedicalQR is not directed to children who cannot legally consent to online services in their jurisdiction. Where permitted, a parent or legal guardian should manage an account created for a dependent.

09

Policy updates

We may update this policy when features, legal requirements or data practices change. The “Last updated” date at the top shows when the current version took effect. We will tell you about material changes through the app or another appropriate channel.