Privacy Policy

Last updated: 27 February 2026

Summary: We collect only what is necessary, store health data encrypted, never sell your data, and give you full control at all times.

1. Who We Are

ab.today is operated by medServe Private Limited, a company registered in Andhra Pradesh, India. Contact: info@ab.today

2. Data We Collect

We collect: (a) Account information — name, email, phone number when you register. (b) Health data — blood type, allergies, medications, emergency contacts — entered voluntarily for MRID. (c) Usage data — anonymised session IDs and page views to improve the product. We never store IP addresses or raw user agents. (d) Communication data — messages you send us via the contact form or WhatsApp.

3. How We Use Your Data

Account and health data is used solely to provide MRID and care coordination services. Usage analytics are anonymised and used for product improvement. We never use health data for advertising.

4. Data Storage & Security

Health data is encrypted at rest (AES-256) and in transit (TLS 1.3). Our systems are designed to be HIPAA-aligned. We conduct regular security reviews.

5. Data Sharing

We do not sell your data. We share data only: (a) with your explicit consent (e.g., sharing MRID with a hospital), (b) with emergency first responders via QR scan, (c) with service providers under strict data processing agreements (e.g., cloud hosting).

6. Your Rights

You have the right to: access your data, correct inaccuracies, delete your account and all associated data, export your health records in standard formats, and withdraw consent at any time. Contact info@ab.today to exercise these rights.

7. Cookies & Tracking

We use a single anonymous session cookie (ab_anon_sid) to improve your experience and track aggregate product usage. This cookie contains no personal information. We do not use third-party advertising trackers.

8. Children

ab.today is not intended for children under 13. Parents may create MRID records for minor children with parental consent.

9. Changes to This Policy

We will notify you of material changes via email. Continued use after 30 days constitutes acceptance.