Privacy Policy

SurakshaCard provides a physical and digital emergency medical ID: a card with a QR code that shows essential emergency information to anyone who scans it, and a PIN-protected profile for the full medical history behind it. This policy explains what information we collect to provide that service, why, and what rights you have over it.

Owner account: full name, email address, phone number, and a login PIN (stored as an irreversible cryptographic hash — we never store or can retrieve your actual login PIN).

Each profile: name, date of birth, blood group, known conditions/allergies, emergency contact details, address (for card delivery), a document-access PIN (stored encrypted, since it must be redisplayed to you to share with someone you trust), any medical documents you upload, and the AI-drafted or owner-approved health summary generated from them.

Payments: a record that a payment was made, its amount, and the payment provider's transaction reference. We do not collect or store your card, UPI, or bank details ourselves — payments are processed directly by our payment processor.

Access logs: when your profile's full information is accessed via the document-access PIN, we log that it happened (time, success/failure) so you can see this history — not who specifically accessed it, since that isn't something we can determine.

To operate the two-tier emergency ID service itself: showing essential information to anyone who scans your card, unlocking full history to whoever you've shared your document-access PIN with, printing and shipping the physical card, processing card and subscription payments, and sending service emails (email verification, PIN reset links, subscription renewal reminders, and security notices such as a PIN-reset confirmation).

We share information only with the service providers needed to operate SurakshaCard: a payment processor (to process card and subscription payments), a cloud storage provider (to store uploaded documents), an email delivery provider (to send the emails described above), and our hosting provider. We do not sell personal information, and we do not share it with advertisers.

Within SurakshaCard, our support team can see account and profile details needed to help you (name, contact info, card/subscription status) but cannot view the content of your uploaded documents or health summary — only that they exist, by design.

We retain your information for as long as your account is active, or as needed to provide the service and meet legal obligations. You can request deletion of your account and associated data at any time by emailing surakshacardsupport@gmail.com.

As someone whose personal data we process, you have the right to:

• Access a summary of the personal data we hold about you.
• Request correction or updating of inaccurate or incomplete data.
• Request erasure of your data, once it's no longer needed for the purpose it was collected for.
• Withdraw your consent at any time (this may mean we can no longer provide the service to you).
• Nominate another individual to exercise these rights on your behalf in the event of death or incapacity.
• Raise a grievance about how your data has been handled.

To exercise any of these rights, or to raise a grievance, contact our Grievance Officer at surakshacardsupport@gmail.com.

An account holder can create profiles for family members, including children or dependents who cannot consent for themselves. By doing so, the account holder confirms they are authorized to provide this information on that person's behalf and to manage consent for them.

Login PINs are stored as one-way cryptographic hashes and can never be retrieved, only verified. Document-access PINs are stored encrypted, since they must be retrievable by the account holder to share with a trusted person. Repeated incorrect PIN attempts are rate-limited and temporarily locked out.

SurakshaCard uses your browser's local storage to keep you logged in — not third-party advertising or tracking cookies.

If this policy changes, we'll update the “Last updated” date above. Continued use of SurakshaCard after a change means you accept the updated policy.

Questions about this policy or your data: surakshacardsupport@gmail.com — support is available 24 hours.