Consumer Health Data Privacy Policy

Only the optional emergency medical information an account owner chooses to add: blood type; allergies; medications; free-text medical notes. Collected solely with the owner’s express, separate, opt-in consent, or as necessary to provide the emergency-information feature requested.

Exclusively to display the owner’s chosen emergency information on that owner’s tag page (if published) and operate the requested emergency-notification feature. Never for advertising, marketing, analytics, or profiling.

One only: the information the account owner types in.

We do not sell consumer health data and will not without the signed authorization the law requires (we have no intention of seeking one). We do not share it with affiliates (we have none) or third parties for their own purposes. It is processed on our behalf, under binding contracts, only by the infrastructure processors needed to deliver the service: Supabase, Inc. (encrypted database hosting) and Vercel, Inc. (page rendering). Stored with field-level AES-256-GCM encryption.

Confirm whether we collect, share, or sell consumer health data about you and access it (including the list of third parties it’s been shared with); withdraw consent; and have it deleted — including from backups. Exercise in your account (Settings → Medical information / Delete account) or by emailing support@tyratag.com from your account email; we authenticate against your existing account and never require a new one. We respond within 45 days (extendable once by 45 days with notice). If we decline, you may appeal by replying to our decision; appeal outcomes include instructions for contacting the Washington Attorney General.

10FORTY3 GROUP · Winnipeg, Manitoba, Canada · support@tyratag.com