Privacy Policy

Last updated: 23 September 2026

1. Who is responsible for your data

CareCode is operated by CareCode Sàrl, in Switzerland. For any question about your data, write to info@carecode.ch.

Processing is governed by the Swiss Federal Act on Data Protection (revFADP) and, if you live in the European Union, by the GDPR.

2. The data we process

Account: e-mail address, password (stored only as a bcrypt hash, never in plain text), language, creation date.

Identity: last name, first name, date of birth, sex, postal address, post code, town, country, profile photo, patient number.

Health data (a particularly sensitive category under the revFADP): blood group, height, weight, medical conditions, treatments and their dosage, allergies, sexually transmitted infections, resistance to antibiotics and to anti-inflammatory drugs, vaccinations and a photo of your vaccination record, advance directives (organ donation, resuscitation), special instructions, and any medical reports you upload as PDF files.

Contacts: people to notify in an emergency (name, relationship, phone, e-mail) and your regular doctor.

Insurance: insurer, policy number, AHV/AVS social security number, coverage.

Orders: delivery address, amounts, payment method and transaction references.

Technical data: IP address, browser, login dates, failed login attempts, the history of changes to your profile, and — if you use the mobile app — a push notification identifier.

You only fill in what you want to: apart from your e-mail address and password, all of these fields are optional.

3. What this data is used for
  • Building your emergency record and producing your QR code and your card.
  • Identifying you and keeping your account secure.
  • Handling your orders, your payments and your subscription.
  • Sending you the e-mails that come with the service (verification, password reset, order confirmation, shipping, renewal reminder).
  • Detecting abuse (limiting login attempts) and keeping a log of the changes made to your profile, which you can consult.

We do no advertising, no profiling and no selling of data. Your health data is never used for any purpose other than those listed above.

4. The key point: who can read your emergency record

This is the whole point of the service, and it matters that you understand it clearly: anyone who scans your QR code or holds your NFC card to a phone can see your emergency record, with no password. That is what allows a first responder to act when you cannot speak.

As a result:

  • Only put in your record what you are willing to have read by whoever is holding your card.
  • Treat your card as a sensitive document.
  • If it is lost or stolen, deactivate it immediately from your account: the QR code stops working straight away.
  • A card received by post stays inactive until you enter the activation code: a card intercepted before delivery shows nothing.

Emergency pages are excluded from search engine indexing (noindex): they cannot be found through Google.

5. Who else has access to your data

We only pass your data to the service providers that are strictly necessary:

  • Infomaniak (Switzerland) — hosting of the website and the database. Your health data is stored in Switzerland.
  • Stripe — payment processing only. Stripe receives your e-mail address and your payment details; it receives no health data. Your card and bank details never pass through our servers.
  • The push notification service of your operating system, if you use the mobile app and accept notifications.

We do not disclose your data to any authority unless legally required to do so.

6. How long we keep it

Your data is kept for as long as your account exists. When you delete it, the data is erased permanently and immediately: profile, medical data, PDF reports, photos, QR code, sharing links, and the records of the relatives you manage.

Only your invoices are kept for ten years, as Swiss accounting law requires (Art. 958f of the Swiss Code of Obligations), and your name and address are removed from them. They contain no health data.

7. How we protect it
  • The whole site is served over HTTPS.
  • Passwords are hashed with bcrypt, never stored in plain text.
  • In the mobile app, the offline copy of your health data is encrypted on the device (SQLCipher), with a key held in the phone's secure keystore.
  • Login attempts and password reset requests are rate-limited.
  • Deleting your account requires you to re-enter your password.
  • Uploaded medical documents are stored outside the web root and can only be reached through an access check.

No system is infallible: we cannot guarantee absolute security.

8. Your rights

At any time you can:

  • View and correct your data from your profile.
  • Export your entire record as a PDF.
  • Delete your account, from the app (Profile tab) or at carecode.ch/delete-account.php.
  • Consult the history of the changes made to your profile.
  • Object to a processing operation or ask for it to be restricted, by writing to us.

You can lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), or with the supervisory authority in your country if you live in the European Union.

9. Children and relatives

You can create records for your relatives, including your minor children. In doing so, you confirm that you are entitled to. These records are deleted at the same time as your account.

10. Cookies

We use only a technical session cookie, which is essential to keep you logged in, plus the storage of your language choice. No advertising cookies, no third-party trackers, no analytics tools.

11. Changes

Any substantial change to this policy will be notified to you by e-mail or the next time you log in. The date at the top of the page shows the last revision.

12. Contact us

For any question, or to exercise your rights: info@carecode.ch.

Terms & Conditions · Delete my account