What we do with your family’s health data — and what we never do.
Plain answers, kept up to date. Last reviewed 11 Nov 2026. The legal text is in our privacy notice.
Encrypted
Medical details and files are encrypted before they are stored.
Under the DPDP Act
Consent for each purpose, and your rights to access, correct and erase.
Never sold
No ads, no data brokers, no selling or renting your data. Ever.
Every view logged
You can see who saw what, and when.
In a medical emergency, call 108 (ambulance) or 112 first. AIOID is not an emergency service. It helps the people nearby and your family act faster while help is on the way.
Three kinds of access. All visible to you.
| Who | Can see | How |
|---|---|---|
| A stranger who scans a tag | Only the fields you switched on: first name and last initial, age, blood group, severe allergies, conditions, medicines, languages. Children: first name and age band only. | No login. Phone numbers are never shown. |
| A hospital or doctor | The fuller record: insurance, reports, doctor, history. | Only after a family admin approves. Ends on a timer. |
| AIOID staff | No medical data by default. | Only when your family admin approves it for a specific problem, or in an emergency, when a senior staff member opens it for a limited time. Both are written to your family’s access log. |
You see every view of Papa’s data.
An example of what a family admin sees in the app after an emergency (sample family, sample numbers).
| When (IST) | Who | What |
|---|---|---|
| 11 Nov, 10:46 am | Bystander +91 98xxx xx210 · verified 10:47 | Public scan page, card K7QM4XPT |
| 11 Nov, 10:48 am | Bystander | Opened the “Very sweaty and confused” first-aid guide |
| 11 Nov, 10:51 am | City Hospital, Pune | Asked for records |
| 11 Nov, 10:53 am | City Hospital, Pune Approved by Rahul Kothari | Records for 6 hours (access code sent by SMS) |
Our processors, in one list.
These services run parts of AIOID for us. We will tell you 30 days before adding a new one. Our own database and encrypted files run on AIOID’s server.
| Processor | Purpose | Where |
|---|---|---|
| Meta (WhatsApp) | WhatsApp check-ins, reminders and alerts | Outside India |
| Google Firebase | SMS sign-in codes and app notifications | Outside India |
| Cloudflare | Keeps the emergency page online; protects against attacks | India and outside |
| Anthropic (Claude) | Reads lab reports, only if you turn it on | Outside India |
Payment and courier partners will be added to this list before paid plans and kit orders start.
Steps our medical reviewer approves. Never a diagnosis.
During the beta, first-aid guides are switched off until our medical reviewer has approved each one. Until then the scan page shows the person’s emergency profile and a one-tap Call 108 — the operator will guide you.
A protocol library, not free text
Every guide — CPR, choking, bleeding, fits, very sweaty and confused, face drooping or slurred speech, burns, road accidents, allergic reactions — is written from Indian Resuscitation Council and IFRC first-aid guidelines.
Approved by our medical reviewer first
No guide goes live until our medical reviewer has approved that version. Old versions are kept for audit.
The person helping picks from a menu
They tap what they see — “Not breathing”, “Choking”, “Very sweaty and confused”. AIOID opens that guide and adds facts from the card, such as “he has diabetes” or “tell the paramedics about the penicillin allergy”. It never guesses what is wrong, never invents treatments, never gives drug doses and never diagnoses.
Calling comes first
“Call 108” is pinned on every first-aid screen. There is always an “I’m not sure” path that starts with “Is the person breathing?”.
Ask, correct, delete. We answer on the clock.
Make a request from Me → Privacy in the app, or write to our Grievance Officer.
- Access
- Download all your family’s data as a file. Ready within 72 hours, usually at once.
- Correction
- Edit anything in the app, or ask us to correct it.
- Erasure
- Delete your account. It is hidden at once and erased after 7 days, so you can undo it until then.
- Grievance
- Write to grievance@aioid.in. We acknowledge within 24 hours and answer within 48 hours. How it works.
Staff sign-in
Our console has its own sign-in: a strong password and an authenticator app, always. Sensitive actions ask for the code again.
Roles, not trust
Each role sees only what it needs. Support can’t see medical data unless your family admin approves it for a specific problem; in an emergency, a senior staff member can open it for a limited time — you’ll see it in your log. Every staff action is written to an audit log that can’t be edited.
Report a security issue
Write to security@aioid.in. We reply within 2 working days and credit researchers who report responsibly.