Privacy Policy
Last Updated: February 21, 2026
Relative Information ("Relative Information," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use the Relative Information platform, including our website, user dashboard, public emergency profile pages, and all related services (collectively, the "Platform").
This Privacy Policy applies to all users of the Platform, including registered subscribers and individuals who use the call-in system to reach emergency contacts. By using the Platform, you consent to the data practices described in this policy. If you do not agree with this Privacy Policy, please do not use the Platform.
1. Information We Collect
We collect information that you provide directly to us, information generated through your use of the Platform, and limited information from third-party authentication providers. The categories of personal information we collect are described below.
1.1 Information You Provide Directly
| Category | Data Elements | Purpose |
|---|---|---|
| Account Information | Name, email address | Account creation, communication, identification |
| Emergency Contacts | Contact name, phone number, email, relationship, priority ranking, notes | Display on public emergency profile for emergency access |
| Medical Information | Blood type, allergies, medications, medical conditions, organ donor status, additional medical notes | Display on public emergency profile for first responder access |
| Tag Information | Tag labels, tag codes | Linking physical tags to your digital profile |
| Payment Information | Payment card details (processed by our third-party payment processor) | Subscription billing |
1.2 Information Collected Automatically
When you access the Platform, we may automatically collect certain technical information, including your IP address, browser type and version, device type, operating system, referring URLs, pages viewed, and the dates and times of your visits. We also collect information about tag call-in events, including the date, time, and general geographic region of each call-in (derived from IP address).
1.3 Information from Third Parties
When you authenticate through our OAuth provider, we receive your name, email address, and a unique identifier. We do not receive or store your password from the authentication provider.
2. Sensitive Personal Information (Health Data)
Important Notice About Medical Information
Relative Information collects and processes health-related information (blood type, allergies, medications, medical conditions, organ donor status) that may be classified as "sensitive personal information" or "special category data" under applicable privacy laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).
We process this sensitive information solely on the basis of your explicit consent, which you provide when you voluntarily enter medical information into the Platform. You are never required to provide medical information — it is entirely optional. You may withdraw your consent and delete your medical information at any time through your dashboard settings.
Relative Information is not a "covered entity" or "business associate" under the United States Health Insurance Portability and Accountability Act (HIPAA). However, we apply security practices consistent with industry standards for protecting health-related information.
3. How We Use Your Information
We use the information we collect for the following purposes:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Providing and maintaining the Platform, including routing calls to your emergency contacts when your tag ID is used | Performance of contract |
| Processing your subscription and payments | Performance of contract |
| Sending you service-related communications (account confirmations, security alerts, tag call-in notifications) | Performance of contract / Legitimate interest |
| Displaying your medical information on your emergency profile | Explicit consent |
| Improving the Platform, analyzing usage patterns, and developing new features | Legitimate interest |
| Preventing fraud, abuse, and security threats | Legitimate interest |
| Complying with legal obligations | Legal obligation |
We do not sell your personal information to third parties. We do not use your personal information for automated decision-making or profiling that produces legal effects concerning you.
4. How We Share Your Information
The core function of Relative Information requires that certain information be shared publicly through your emergency profile. Beyond this intentional sharing, we limit disclosure of your information to the following circumstances:
- Emergency Contact Routing: When someone calls the number on your tag and enters your tag ID, the automated system routes calls to your emergency contacts in priority order. Your first name and any medical information you have provided may also be accessible through your emergency profile. This is the core function of the service and is authorized by your explicit consent.
- Service Providers: We share information with third-party service providers who perform services on our behalf, such as payment processing, hosting, and analytics. These providers are contractually obligated to use your information only for the purposes of providing services to us and to maintain appropriate security measures.
- Legal Requirements: We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Relative Information, our users, or the public.
- Business Transfers: In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with the Platform's services. If you close your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes (such as resolving disputes or enforcing our agreements).
Tag call-in event logs (which do not contain the caller's personal information beyond IP address) may be retained for up to 12 months for analytics and security purposes, after which they are automatically deleted.
6. Data Security
We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/SSL), secure authentication protocols, access controls limiting employee access to personal data, and regular security assessments.
However, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the security of your account credentials and physical tags.
7. Your Rights Under the GDPR (European Economic Area)
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR) and equivalent local laws:
| Right | Description |
|---|---|
| Right of Access | You have the right to request a copy of the personal data we hold about you. |
| Right to Rectification | You have the right to request correction of inaccurate or incomplete personal data. You can update most information directly through your dashboard. |
| Right to Erasure | You have the right to request deletion of your personal data, subject to certain legal exceptions. You can delete individual records through your dashboard or request full account deletion. |
| Right to Restrict Processing | You have the right to request that we restrict the processing of your personal data in certain circumstances. |
| Right to Data Portability | You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller. |
| Right to Object | You have the right to object to processing of your personal data based on legitimate interests. |
| Right to Withdraw Consent | Where processing is based on consent (e.g., medical information), you may withdraw consent at any time without affecting the lawfulness of prior processing. |
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. You also have the right to lodge a complaint with your local data protection authority.
8. Your Rights Under the CCPA (California Residents)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
| Right | Description |
|---|---|
| Right to Know | You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months. |
| Right to Delete | You have the right to request deletion of your personal information, subject to certain exceptions. |
| Right to Correct | You have the right to request correction of inaccurate personal information. |
| Right to Opt-Out of Sale | Relative Information does not sell personal information. If this changes, we will provide a "Do Not Sell My Personal Information" link. |
| Right to Limit Use of Sensitive Info | You have the right to limit the use and disclosure of your sensitive personal information (including health data) to purposes necessary for providing the service. |
| Right to Non-Discrimination | We will not discriminate against you for exercising any of your CCPA rights. |
To exercise your CCPA rights, please contact us at [email protected] or use the data management tools available in your dashboard settings. We will verify your identity before processing any request. You may also designate an authorized agent to make a request on your behalf.
Categories of Personal Information Collected in the Past 12 Months: Identifiers (name, email), health information (blood type, allergies, medications, conditions), internet activity information (IP address, browser type, pages visited), and commercial information (subscription plan, payment history).
9. International Data Transfers
Relative Information is based in the United States. If you access the Platform from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.
For users in the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or other lawful transfer mechanisms, to ensure that your personal data receives an adequate level of protection when transferred outside the EEA.
10. Children's Privacy
The Platform is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children under these ages. A parent or legal guardian may create an account and manage a Relative Information profile on behalf of a minor, in which case the parent or guardian is responsible for the minor's information and consents to this Privacy Policy on their behalf.
If we become aware that we have collected personal information from a child under the applicable age without parental consent, we will take steps to delete that information promptly. If you believe we may have collected information from a child, please contact us at [email protected].
11. Cookies and Tracking Technologies
We use essential cookies to maintain your authentication session and ensure the Platform functions correctly. These cookies are strictly necessary for the operation of the Platform and cannot be disabled.
We may also use analytics cookies to understand how users interact with the Platform and to improve our services. You can control non-essential cookies through your browser settings. Disabling cookies may affect the functionality of certain features.
We do not use tracking technologies for targeted advertising purposes. We honor "Do Not Track" browser signals.
12. Third-Party Services
The Platform may contain links to third-party websites or services that are not operated by Relative Information. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through the Platform.
Our current third-party service providers include authentication providers (for login), payment processors (for subscription billing), and cloud hosting providers (for data storage). Each provider is bound by contractual obligations to protect your data.
13. Data Breach Notification
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users without undue delay and, where required by law, within 72 hours of becoming aware of the breach. We will also notify the relevant supervisory authority where required by the GDPR or other applicable law.
Notification will include a description of the nature of the breach, the categories and approximate number of individuals affected, the likely consequences, and the measures taken or proposed to address the breach.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated Privacy Policy on the Platform with a revised "Last Updated" date. For material changes, we will provide prominent notice (such as an email notification or an in-app banner) at least 30 days before the changes take effect.
Your continued use of the Platform after any changes to this Privacy Policy constitutes your acceptance of the revised policy. We encourage you to review this Privacy Policy periodically.
15. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
For GDPR-related inquiries, you may also contact our Data Protection Officer at [email protected]. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.