How VitaQR handles personal data
Data we may process
- Account and contact data such as name, email, mobile and authentication records.
- Safety QR ownership, selected emergency contacts, owner-approved public profile fields, scan/security metadata, SOS/call workflow records and lifecycle state.
- Health patient/provider, appointment, queue and reminder data where Health is used.
- Education institution roles, student/guardian links, attendance, fees and operational records where Education is used.
- Location only where a feature requires it and the applicable permission/consent is provided. Family Circle is designed not to retain family precise-location history on VitaQR servers; other features have separate retention rules.
- Order, delivery, payment-status and invoice metadata. VitaQR is designed not to store raw card numbers or CVV.
- Device, session, audit and abuse-prevention signals.
Purposes
We process data to provide requested features, authenticate users, operate Safety/Health/Education workflows, fulfil orders, maintain security and auditability, prevent abuse, provide support and meet applicable obligations.
Public QR disclosure
A scan does not make all profile data public. Public responses use context-specific privacy choices and allow-listed fields. Masked-contact workflows are designed not to publish real phone numbers.
Providers
When enabled, VitaQR may use contracted hosting, database, payment, telephony, email, push-notification and security providers. Provider availability can vary during beta.
Retention
Feature-specific product retention defaults apply and may be adjusted for security, disputes, legal obligations or active legal holds. These product defaults are not represented as statutory retention periods.
Security
Controls include authentication, authorization boundaries, encryption for designated sensitive fields, secret isolation, rate limits, audit/security logging, provider-signature validation and operational monitoring. No online system can promise absolute security.
Children and guardians
Child/School features require additional guardian and institutional governance. Public child-facing launch remains gated on the applicable legal and consent controls.
Your requests
For supported access, correction, deletion, consent, export or privacy/grievance requests, contact support@vitaqr.in. Some records may need to be retained where law, security or disputes require it.
Policy changes
Material changes receive a new version. Where explicit registration consent is enabled, VitaQR records the accepted policy versions and URLs rather than rewriting historical consent.