1. Who we are
AIOID (“we”, “us”) is a proprietorship based in Pune, India. We run the AIOID app, the website aioid.in, the WhatsApp service for family members, and the scan pages that open when someone scans an AIOID card, sticker or tag. Under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) we are the Data Fiduciary for the personal data described here.
AIOID is not an emergency service. In a medical emergency, call 108 or 112.
2. What we collect
We collect only what the service needs:
- Your account — your mobile number (to sign you in with a one-time code), name, city, language, and an email address if you add one. The devices you are signed in on.
- Family members’ profiles — names, relationships, dates of birth or age, gender, language and, for members on WhatsApp, their mobile number.
- Emergency profiles (health data) — blood group, allergies and how severe they are, conditions, medicines, doctor, preferred hospital, insurance details and a note for the person helping. You choose which of these appear on the scan page.
- Emergency contacts — names, relationships, area and mobile numbers of the people to alert.
- Care — check-in times and replies, medicine schedules and whether each dose was confirmed.
- Health Locker — reports, prescriptions and other documents you upload or a family member forwards on WhatsApp, and, if AI reading is on, the dates and values read from them.
- Tags and scans — which tag belongs to whom, and when each tag is scanned.
- Emergencies — when someone who scanned a tag asks to alert the family: their verified mobile number, the location they choose to share, and which first-aid guides they opened. When hospital staff ask for records: their name, hospital, role and verified number.
- Access log — who viewed or changed what, and when.
We do not collect Aadhaar numbers, and we ask you not to upload government ID documents.
3. Why we use it, and your consent
We ask for your consent for each purpose separately, in the app, and record which version of the notice you agreed to. Three purposes are needed for AIOID to work at all; reading reports with AI is optional. You can withdraw any consent in the app under Me → Privacy → Consents. Withdrawing does not affect what was done before.
| Purpose | What it covers | If you withdraw it |
|---|---|---|
| Show emergency profiles when a card is scanned | Only the fields you choose, to the person who scans. | Anyone who scans a family card or sticker will see “Tag not set up” instead of the emergency card. |
| Alert your family and emergency contacts | By push, WhatsApp, SMS and email, with the scan location. | Nobody can be alerted when a card is scanned, and the app stops working for you. |
| Store health records | Blood group, allergies, medicines and reports you add. Encrypted. | You can no longer add or see Medical IDs and reports in AIOID. |
| Read reports with AI Optional | Anthropic’s Claude pulls dates and values out of lab reports. It never diagnoses. | New reports won’t be read by AI. You can still add and see them. |
Family members who use only WhatsApp agree separately, on the invite page or in WhatsApp, to join the family and to receive check-ins and reminders. Emergency contacts outside the family are alerted only after they agree to be a contact.
We also use personal data to keep AIOID secure (for example, to stop tags being used for false alarms), to answer your requests, and where the law requires it. We do not use your data for advertising and we never sell it.
4. Children and teens
A child’s profile is created and managed by a parent or guardian, who gives consent for the child. For anyone under 13 the scan page never shows a photo, surname, school or address — this is locked and cannot be switched on. Teens aged 13–17 can use the teen app with a guardian’s verifiable consent; guardians stay in control and the teen cannot remove them. We do not track children or show them advertising.
5. Who we share it with
- Your family — the people in your family see what their role allows. Caregivers see only the care plan and emergency card of the people they look after.
- The person who scans a tag — only the fields you switched on for the scan page. Phone numbers are never shown.
- Emergency contacts — when a tag is scanned or a check-in or dose is missed, the people you chose are alerted, with the helper’s number and shared location in an emergency.
- Hospitals and doctors — only after a family admin approves in the app, for 2, 6 or 24 hours (the staff member gets an access code by SMS on the number they checked), or through a share link you create that ends on a timer.
- AIOID staff — no medical data by default. Support sees medical data only when your family admin approves it for a specific problem; in an emergency, a senior staff member can open it for a limited time. Both are written to your family’s access log.
- Processors — the services below run parts of AIOID for us, under contract, and may use the data only to do that.
- When the law requires it — for example, a valid order from a court or authority.
| Processor | Purpose | Where |
|---|---|---|
| Meta (WhatsApp) | WhatsApp check-ins, reminders and alerts | Outside India |
| Google Firebase | SMS sign-in codes and app notifications | Outside India |
| Cloudflare | Keeps the emergency page online; protects against attacks | India and outside |
| Anthropic (Claude) | Reads lab reports, only if you turn it on | Outside India |
We will add payment and courier partners to this list before paid plans and kit orders start, and tell you at least 30 days before we add any new processor.
6. Where it is processed
Our database and the encrypted Locker files run on AIOID’s own server. Some processors listed above handle data outside India (for example WhatsApp messages, SMS codes and, only if you turn it on, AI reading of reports). We transfer data outside India only as the DPDP Act allows.
WhatsApp. Messages, voice notes and files (such as a lab report) that a family member sends or forwards to AIOID on WhatsApp pass through the servers of Meta, which runs WhatsApp, before they reach AIOID. Meta handles them under its own terms. Once a file reaches us it is encrypted and stored on AIOID’s server like any other Locker file.
AI reading
If you turn on AI reading, the report you add is sent to Anthropic’s Claude to pull out dates, test names, values and the lab’s ranges. The result is descriptive only: AIOID never diagnoses or advises treatment. Values reach a hospital view only after the family has checked them.
7. How long we keep it
This is what AIOID does today. Where a period has not been decided yet, we say so.
| What | How long |
|---|---|
| Your account and family data | While your account exists. |
| After you delete your account | Hidden and tags stopped at once; erased after 7 days. You can undo it until then. Erasing removes names, numbers, dates of birth, emergency profiles, Locker documents and files, emergency contacts, Care words and notes, and support tickets. |
| A document you delete from the Locker | Kept in “Recently deleted” for 30 days so you can undo it, then erased with its files. |
| A helper’s or hospital staff member’s number | Erased 30 days after the emergency is closed. A number check that never became an emergency is erased 30 days after it was made. |
| Emergency records (when a card was scanned, who was alerted, what happened) | Kept as long as the account exists. When the account is erased, the record stays only as a count, without the helper’s number, the place or any message text. |
| Care records (check-in replies, doses confirmed) | Kept as long as the account exists. When the account is erased, the words and notes go; only counts stay. |
| The access log (who saw or changed what, and when) | Kept as long as the account exists, and kept after the account is erased, as proof of who saw what. After erasure it no longer points to a name or a number. [How long it is kept after erasure: to be decided.] |
| Records of consent | Kept, also after the account is erased, to show what was agreed and when. They hold no name or number. |
| Invoices (once paid plans start) | 8 years, as tax law requires. |
| A copy of your data you asked for | Can be downloaded again for 7 days. |
| The beta waitlist | Erased 12 months after you last signed up, or sooner if you ask. |
| Messages from the help form | Erased 12 months after we receive them, or sooner if you ask. |
| Backups | [To be confirmed.] How often the server is backed up, and how long backups are kept, has not been decided yet. |
Files sent on WhatsApp also pass through Meta’s servers first (see section 6); how long Meta keeps them is set by Meta’s terms, not ours.
8. How we protect it
Medical details and Locker files are encrypted with AES-256-GCM before they are stored. Every view of medical data is written to an access log the family can see. Our staff console has its own sign-in with a password and an authenticator app. Support can’t see medical data unless your family admin approves it for a specific problem; in an emergency, a senior staff member can open it for a limited time — you’ll see it in your access log. If a breach affects your data, we will tell you and the Data Protection Board as the law requires.
9. Your rights
- Access — download a copy of your data from Me → Privacy. It is ready within 72 hours, usually at once.
- Correction — edit your data in the app, or ask us to correct it.
- Erasure — delete your account from Me → Privacy, or ask us to.
- Withdraw consent — in Me → Privacy → Consents, at any time.
- Nominate someone — under section 14 of the DPDP Act you can name another person to use these rights for you if you die or become unable to act yourself (for example through illness). Write to the grievance officer with their name and how to reach them; we confirm it in writing. You can change or cancel the nomination at any time.
- Grievance — complain to our grievance officer first (section 10).
- Complain to the Data Protection Board of India — if you are not satisfied with our answer, or we do not answer in time, you can complain to the Data Protection Board of India, set up under the DPDP Act. The Board takes complaints online through its own digital platform. [The Board’s complaint link will be added here once it is confirmed.]
Family members on WhatsApp can type HELP to AIOID at any time to see what is shared, stop messages or delete their data.
10. Grievance officer
Write to grievance@aioid.in. We acknowledge within 24 hours, answer within 48 hours and resolve within 30 days. [Name of the grievance officer and postal address to be added.] More on the grievance page.
11. The beta waitlist
If you join the waitlist on aioid.in/app we keep your name, mobile number and city, with the consent you gave and when (“I agree that AIOID may keep my name, mobile number and city to invite me to the beta. AIOID will contact me at most once, to invite me, and will not use my number for anything else.”, notice version 2026-11-11). Name and number are encrypted. We use them only to send you one invite to the beta. We send no messages from the form, and no one else gets the list. Ask us to remove you at any time at support@aioid.in.
12. Messages you send us
If you write to us with the form on aioid.in/help, we keep your name, the email or number you gave, the topic and your message. All of it is encrypted. We use it only to reply to you; only staff who answer support can read it, and each time they open a message it is logged. We send nothing from the form itself. Messages are erased 12 months after we receive them, or sooner if you ask at support@aioid.in. Please don’t send medical details this way.
13. This website
aioid.in sets no cookies and uses no analytics, trackers, advertising or third-party scripts. Our hosting provider, Cloudflare, processes your IP address to deliver the site and protect it from attacks.
14. Changes to this notice
If we make a material change, we will tell you in the app and by email (if you gave us one) at least 30 days before it takes effect, and ask again for consent where the law requires it.