Privacy Policy
Medical data deserves
a short, honest policy.
LIFEKEY holds health information, so we keep the surface small: no accounts, no trackers, no advertising. Here's exactly what's stored and who can reach it.
A LIFEKEY profile is deliberately easy to open — a stranger holding your link in an emergency shouldn't face a login screen. That design decision has privacy consequences, and this page spells them out rather than burying them.
01
The short version
We store the profile you type in, nothing more. There are no accounts, no passwords, no advertising trackers, and no analytics profiles following you around the web.
A profile is readable by anyone who has its public link. That is the entire point of the product, and it is the single most important thing to understand before you fill one in.
02
What we collect
Only the fields you complete on the profile form. That may include health information, which is sensitive by nature — so put in what a responder genuinely needs, and leave out what they don't.
- Identity: name, preferred name, pronouns, date of birth.
- Medical facts: blood type, allergies, conditions, medications, organ donor status.
- Care details: physician, physician phone, preferred hospital, insurance provider and policy number.
- Emergency contacts: name, relationship, and phone number for each person you list.
- Free-form notes, plus the dates the profile was created and last updated.
03
What we don't collect
We don't ask for an email address, a password, or a payment method. We don't run third-party advertising or analytics scripts, we don't sell or rent anything to anyone, and we don't build a marketing profile of you.
Because there is no account, there is also no login history and no record tying a profile to a real-world identity beyond what you typed into it yourself.
04
Who can see a profile
Anyone holding the short public link can read the profile. Anyone holding the long private link can read and change it. Access is governed entirely by knowing a link — there is nothing else to check.
Links are long random strings that are not listed anywhere, not indexed by search engines, and not practical to guess. But a link is still a key: share the public one deliberately, and keep the private one to yourself.
05
How we protect it
Profiles are stored in a managed Postgres database and served over HTTPS. Profile and edit pages are marked no-index and no-store so they stay out of search engines and shared caches.
We send a no-referrer policy on every page, which stops the private edit link in your address bar from leaking to any site you click through to. Even so, no system is perfectly secure, and a link pasted into the wrong chat window is beyond our reach.
06
How long we keep it
A profile stays available as long as it exists, because an emergency profile that quietly expires is worse than useless.
You can blank out any field at any time from your private link, and the public page updates immediately. To have a profile removed entirely, write to us with its public link.
07
Service providers
LIFEKEY runs on Netlify, which hosts the site and provides the database. Their infrastructure processes profile data on our behalf in order to store and serve it.
Standard server logs — IP address, timestamp, requested page — are produced by that hosting in the ordinary course of operating a website. We don't use them to build user profiles, and we don't combine them with profile contents.
08
Children and people in your care
Parents, guardians, and carers often create profiles on someone else's behalf, and LIFEKEY is designed for that. If you do, you are responsible for having the authority to share that person's information and for keeping it accurate.
09
Your choices
The strongest privacy control here is what you type. Every field is optional except the name, and a sparse profile with the right allergy on it can be more useful than an exhaustive one.
- Leave out anything a responder wouldn't act on — insurance and policy numbers are optional for a reason.
- Share the public link where it helps: a wallet card, a lock screen, a fridge door.
- Keep the private link in a password manager, and never print it on anything you carry.
- Review the profile whenever your medications or contacts change.
10
Changes to this policy
If our practices change, we'll update this page and move the effective date at the top. With no accounts there's no mailing list to notify, so this page is the record.
Want a profile removed, or have a question about how your data is handled? Write to us and a real person will answer.