ProfiLynq operates on a simple principle: your medical information exists in our system to help you in an emergency — not to be sold, mined, or shared for commercial purposes. This policy explains exactly what we collect, how we use it, and what control you have over it.
1. What we collect
Information you provide
- Account information: Name, phone number, and email address when you create a profile.
- Medical profile data: Blood group, allergies, medications, medical conditions, emergency contacts, and insurance details — only what you choose to add.
- Purchase information: Billing name and address when you purchase a tag. We do not store payment card details — these are handled by our payment processor (Razorpay).
Information collected automatically
- Scan events: When your QR code is scanned, we log the timestamp and approximate location (city-level, based on IP) to send the WhatsApp emergency alert to your registered contacts.
- Usage data: Basic analytics (pages visited, session duration) to improve the product. No individual-level tracking is shared externally.
2. How we use your information
- To display your emergency profile when your QR code is scanned
- To send WhatsApp alerts to your emergency contacts when a scan occurs
- To deliver your physical tag and communicate about your order
- To send optional reminders to verify your profile is up to date (Premium users)
- To improve the ProfiLynq product and fix issues
We do not use your medical data for advertising, profiling, or any commercial purpose beyond the emergency ID service you signed up for.
3. Who can see your data
Public (anyone who scans your QR code)
The following information is visible to anyone who scans your QR code: your name, blood group, allergies, current medications, medical conditions, and emergency contact names and phone numbers. This is by design — the entire point of ProfiLynq is that a first responder can access this information without any login or restriction.
Only add information to your profile that you are comfortable with a stranger seeing in an emergency.
ProfiLynq team
Our engineering and support team can access your profile data for the purpose of resolving technical issues, providing customer support, or fulfilling legal obligations.
Third parties
We use the following third-party services:
- Supabase: Database hosting (data stored in India/Singapore)
- Razorpay: Payment processing (PCI-DSS compliant)
- Twilio / WhatsApp Business API: Emergency alert delivery
- Vercel / Railway: Application hosting
We do not sell your data to any third party under any circumstances.
4. Data storage and security
- Your data is stored in encrypted databases hosted in India and Singapore.
- All data transmission uses HTTPS/TLS encryption.
- Authentication tokens are short-lived and stored client-side only.
- We do not store payment card details.
- Access to production data is limited to a small team and logged.
5. Your rights
You have the right to:
- Access your data: Log in to your dashboard to view all stored information.
- Edit your data: Update your profile at any time from the dashboard.
- Delete your account: Email us at support@profilynq.in to request full deletion of your account and associated data.
- Deactivate your QR: You can deactivate your QR code at any time from the dashboard, making your profile inaccessible to scanners.
6. Children
ProfiLynq accounts require a phone number and are intended for users 13 and older. Parents and guardians may create profiles for minors under their care. If you believe a minor's data has been collected without guardian consent, contact us immediately.
7. Changes to this policy
If we make material changes to this policy, we will notify registered users by email at least 7 days before the changes take effect. The date at the top of this page reflects the most recent update.