Security
Security PIN on the bracelet:
The PIN is always a combination of 9 letters and numbers, e.g.: XZ1258W58.
That makes 60 716 992 766 464 possible combinations.
Login is protected against bots by Google’s reCAPTCHA system.
If the bracelet is lost, you can deactivate the PIN in your account and no one will be able to access your medical information - similar to deactivating a payment card.
Physical data security (Data center):
Data entered into forms is stored on servers located in the Czech Republic, and together with documents and files also within one of the largest and most modern IT infrastructures in the world - Amazon Web Services (AWS) - on servers located in the EU.
AWS data centers represent world-class standards in both physical and software security, capable of withstanding critical situations such as natural disasters, massive hacking attacks, or power outages.
Data transmission security (Network security):
Information that you send or access via the website is private. Communication between you and our website is secured using an HTTPS security certificate issued by the certification authority Let’s Encrypt.
Application-level security:
The foundation of data protection is ensuring that only authorized individuals have access to specific groups of information.
Access to the application itself is protected by a unique username and password.
Viewing the medical profile for rescuers is secured using a unique PIN code on your bracelet. In case the bracelet is lost or your PIN is discovered by an unauthorized person, you can deactivate your medical profile at any time in your user account.
All data and all data transmissions, including the distribution of user passwords, are encrypted.
After terminating the online medical profile or deleting it by the user, most data can usually be restored from backups for a period of 1–2 months—typically if the user decides to start using the online medical profile again.
Backups:
We perform a full backup of all data and files every day. Backups are stored in a geographically separate data center, and historical data is archived for as long as necessary.
FAQ about Your Data
If you cancel your paid plan, your profile will automatically switch to the free Basic plan. All your data will be preserved—only limits on the number of records (e.g., 2 medications, 2 allergies) will start to apply, and these can be edited. Data that cannot be edited can only be deleted. No data is lost; you can simply manage it within the limits of the Basic plan.
If you delete your profile, it will not be removed immediately, but only after 30 days. During this period, you can log back into your profile and cancel the scheduled deletion. This serves as a safeguard in case of a mistake or accidental deletion.
All data is encrypted both in transit (HTTPS/TLS) and at rest on the server. We take the protection of personal data and service security very seriously. Access to the profile is designed so that first responders can quickly obtain important information, but only to the necessary extent.