Privacy Policy
Last updated: 12 July 2026
EMCY ("we", "us") is an emergency response service that connects patients with nearby hospitals during medical emergencies. Because of what EMCY does, we handle sensitive information — this policy explains what we collect, why, who we share it with, and the choices you have.
Information we collect
- Account details — your name, phone number, email address, age, and profile photo (if you add one).
- Medical profile — information you choose to provide, such as blood group, allergies, existing conditions, and medications, so hospitals can prepare for you.
- Emergency contacts and dependents — names and phone numbers of people you add, and profiles you create for dependents in your care.
- Precise location — collected when you trigger or participate in an emergency, so hospitals know where you are. We do not track your location outside of an active emergency.
- Emergency details — the symptoms, triage answers, and case updates generated during an emergency.
- Device information — push notification tokens and basic device data needed to deliver alerts reliably.
How we use it
- To alert nearby hospitals and dispatch the one you confirm during an emergency.
- To share your relevant medical profile with the responding hospital so they can prepare.
- To notify your emergency contacts when you are in an emergency.
- To operate, secure, and improve the service (including crash and error reporting).
We do not sell your personal information, and we do not use it for advertising.
Who we share it with
- Responding hospitals — the hospital(s) handling your emergency receive your identity, location, medical profile, and case details.
- Your emergency contacts — they are notified of your emergency and its status.
- Service providers — we use Google Firebase (authentication, push notifications, storage), our cloud hosting providers, and Sentry (error reporting) to run the service. They process data on our behalf.
- Legal requirements — we may disclose information where required by law.
Retention
Your account and medical profile are kept while your account is active. Emergency case records are retained for medical and legal record-keeping. If you delete your account, we remove your personal data except where we are legally required to retain it.
Security
Data is encrypted in transit, access is authenticated and role-restricted, and hospitals only see cases they are responding to. No system is perfectly secure, but we design for the sensitivity of the data we carry.
Your rights
You can view and edit your profile and medical information in the app at any time. You can request a copy of your data, or deletion of your account and data — see Delete Account. You may also contact us with any privacy question or complaint.
Children
EMCY accounts are for adults. Profiles for children exist only as dependent profiles created and managed by a parent or guardian.
Changes
We will update this policy as the service evolves and change the date above. For significant changes we will notify you in the app.
Contact
Questions about this policy or your data: support@emcy.in