Privacy Policy

LAST UPDATED: August 14, 2026

Emergency Health Profile Association LLC (“EHPA”, “we”, or “us”) operates the website emergencyprofile.org (the “Site”), related websites, networks, applications, and services (collectively, together with the Site, our “Platform”). Our Platform provides users (“you”) with the opportunity to store information that you would like sent to emergency service personnel if your registered phone number is used to call an emergency number (“Emergency Personal Information”), subject to our Terms of Use. Emergency service personnel may include, but are not limited to, public safety access points, emergency communication centers, and first responders.

We appreciate that you are trusting us with information that is important to you, and we want to be transparent about how we use it. We only use your Emergency Personal Information (1) when an emergency call is placed from your registered phone number, and (2) to operate, maintain, and improve the Platform and Service. Note that this privacy policy covers other types of information we collect, too, and we encourage you to read this policy in full.

WHAT DOES THIS PRIVACY POLICY COVER?

This policy covers Personal Information that we collect from you through your use of the Platform, and Personal Information we collect about you (for example, from a charity organization partner who you have authorized to share such information). “Personal Information” means any information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. It may include, but is not limited to, name, email address, postal or other physical address, telephone numbers, and other information linked to a persistent identifier assigned or linkable to an individual or household. Personal Information includes Emergency Personal Information, but it can also include other types of information linkable to you, such as the IP address of the device you use to access our Platform.

This privacy policy does not cover information that cannot reasonably be linked to you or your household, including the compilation or disclosure of reports containing aggregated and anonymized information about Platform users. Note that we may routinely create and disclose such reports, for example, in public reports about usage, to organizations with which we partner, or as part of the community benchmarking provided to emergency service personnel.

TYPES OF PERSONAL INFORMATION THAT WE COLLECT

We collect Emergency Personal Information – that is Personal Information that will be sent to emergency service personnel if your registered phone number is used to call an emergency number – when you voluntarily give it to us through the Platform or the information is provided to us by an organization we partner with (our “Partners”). Such information includes your phone number, name, and any other information that you choose to provide to us, including health information such as allergies, heart conditions, diabetes, respiratory conditions, mental health conditions, substance use information, medications, and free-text notes about your health or care, as well as information about your home, employment, race, gender, familial status, and other information that may be relevant during an emergency. If you do not want information sent to emergency service personnel, do not enter it into our Platform, and do not authorize a partner organization to submit that information to us on your behalf.

We may also automatically collect Emergency Personal Information from a phone or other registered device used to place an emergency call, in order to assist in emergency response efforts. When an emergency call is placed from a mobile phone, this may include the precise geolocation of the phone.

We may also automatically collect other, non-emergency-related Personal Information in connection with your use of our Platform. This may include your username and password for the Platform, information that you send to us via email, and other feedback you provide. It may also include Personal Information automatically collected from your device and related to your use of our Platform. For example, like most website operators, we may collect the IP address or other identifier associated with a device used to access our Platform and information about how you used our Platform.

HOW WE USE PERSONAL INFORMATION

We use your Personal Information to provide the Service (that is, providing the information you entered into the Platform to emergency service personnel) and to operate, maintain, and improve the Platform. For example, we use Personal Information to:

  • Transmit potentially life-saving health information
  • Contact individuals who have requested additional information or updates on the Services
  • Provide notice regarding changes to our terms, conditions, and policies
  • Conduct quality assurance and for research and development purposes, such as data security, improved website navigation and content display, fraud prevention, data analysis, audits, and otherwise improving the Platform and Service.
  • We collect only the health information you choose to provide. We do not require you to enter any health information to use the Platform. We limit our collection and use of Personal Information to what is reasonably necessary and proportionate to the purposes described in this Policy.

DO WE SELL YOUR PERSONAL INFORMATION?

No. We do not sell or share (as those terms are defined under the California Consumer Privacy Act, as amended, or any equivalent state data protection law) Personal Information that is covered by this Privacy Policy. We do not sell consumer health data.

OUR SHARING OF PERSONAL INFORMATION

We only share your Personal Information in connection with (1) facilitating emergency personnel response when your phone number is used to place an emergency call, (2) operating, maintaining, and improving the Platform, or (3) any disclosures required by law or to preserve our legal rights. To these ends, we may disclose your Personal Information to the following categories of third parties:

Emergency Agencies

By using the Platform and registering your phone number, you are directing us to provide your Emergency

Personal Information to emergency service agencies and their partners who facilitate emergency preparedness and response (collectively, “Emergency Agencies”) as follows.When you dial an emergency number from a phone number registered to your account in the Platform, we may release your Emergency Personal Information to Emergency Agencies. We may also release your Emergency Personal Information to Emergency Agencies for emergency preparedness purposes, independent of an emergency call.

When we share your Personal Information with Emergency Agencies, we do not control what happens to your Personal Information. The Emergency Agencies receiving your Personal Information may use and share it in accordance with their own privacy policies and/or procedures, but are prohibited from using or disclosing Personal Information in a manner that would violate the law.

Our Service Providers

We may use other companies and organizations (“Service Providers”) to operate, maintain, and improve our Platform and to communicate with emergency response providers. We may share your Personal Information with these Service Providers as necessary for them to provide services on our behalf. For example, we share your Personal Information with our service provider, RapidSOS, Inc., in order to deliver your information to the proper public safety agency. We also share your phone number solely to verify your phone number during the registration process. We prohibit our Service Providers, including RapidSOS, from using your Personal Information for any other purpose. Our Service Providers are contractually required to maintain comparable confidentiality and security to what we maintain for Personal Information ourselves.

To Protect Our Legal Rights

We may preserve or disclose information about you to comply with a law, regulation, legal process, or governmental request; to assert legal rights or defend against legal claims; or to prevent, detect, or investigate illegal activity, fraud, abuse, violations of our terms, or threats to the security of the Services or the physical safety of any person.

Business Transfers

We may disclose Personal Information in connection with any reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).

CONSENT TO COLLECTION AND SHARING OF HEALTH INFORMATION

We collect health information only with your affirmative, voluntary consent. When you enter health information into the Platform, you will be asked to consent to (1) our collection and use of that information and (2) our sharing of that information with emergency agencies and service providers. These consents are separate and distinct. You may withdraw your consent at any time by deleting the applicable information from your profile or by contacting us. Withdrawal of consent will not affect any collection, use, or disclosure that occurred before the withdrawal.

If you submit health information about another person, including a child, you represent that you have obtained all consents and authorizations necessary for us to collect, use, and share that information for the purposes described in this Policy.

YOUR PRIVACY CHOICES

You can update and review Personal Information contained in your user account at any time, by logging in. It is your responsibility to keep that information up-to-date (for instance, updating your phone number shouldyou change numbers or adding or removing information you believe would be helpful in an emergency situation).

Subject to applicable law, you may have certain rights regarding your Personal Information. These rights are not absolute and may be subject to exceptions and verification. You may make the following requests:

  • Access/Know. You have the right to know and request that we disclose the Personal Information we collect about you, including the categories and specific pieces of Personal Information collected, the purposes for collection, the categories of sources, and the categories of third parties with whom we share it.
  • Portability. You have the right to obtain a copy of your Personal Information in a portable and, to the extent technically feasible, readily usable format. You can also request that we transmit the data to another entity where technically feasible.
  • Deletion. You have the right to request that we delete Personal Information we have collected about you. For health information, we will honor deletion requests within 30 days for active systems and purge archived or backup copies within 6 months.
  • Correction. You have the right to request correction of inaccurate Personal Information we maintain about you.
  • Withdrawal of Consent. You have the right to withdraw consent to the collection, use, or sharing of your Personal Information, including health information, at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.
  • Non-Discrimination. We will not discriminate against you for exercising any of these rights, including by denying you services, charging different prices, or providing a different level of quality.

Your rights regarding your Personal Information depend on the data privacy laws applicable to where you reside. For security purposes, we will verify your identity when you request to exercise your data privacy rights. You may also designate an authorized agent to make these requests on your behalf. If you use an authorized agent, we may need to collect additional information to verify your identity before processing the request. Under certain circumstances, we may be unable to fulfill your request, such as if we cannot verify your identity, if compliance would interfere with our regulatory obligations, or if we no longer have the requested Personal Information. In any event, we will respond to your request within a reasonable timeframe or as required by applicable law and provide you with an explanation. If we deny your request, we will inform you of the reasons and provide instructions on how to appeal.

You can make a request by emailing privacy@emergencyprofile.org or writing to Emergency Health Profile Association LLC, Attn: Data Request, 167 Madison Avenue, Suite 205 #615, New York, NY 10016. We will not discriminate against anyone who exercises their privacy rights.

THIRD-PARTY SERVICES

The Service may contain features or links to websites and services provided by third parties. Any information you provide on third-party sites or services is provided directly to the operators of such services and is subject to those operators’ policies, if any, governing privacy and security, even if accessed through the Service. We are not responsible for the content or privacy and security practices and policies of third-party sites or services to which links or access are provided through the Service. We encourage you to learn about third parties’ privacy and security policies before providing them with information.

DATA RETENTION

We retain your Personal Information for as long as reasonably necessary to fulfill the purposes described in this Policy and in accordance with applicable law. In determining retention periods, we consider the nature and sensitivity of the information, the purposes for which it was collected, and applicable legal and regulatory requirements. When Personal Information is no longer needed, we delete or anonymize it. For children's Personal Information, we retain data only as long as reasonably necessary to provide the emergency profile service. When a parent requests deletion or withdraws consent, we will delete the child's Personal Information within 30 days. Archived or backup copies will be purged within 6 months of a deletion request.

OUR POLICIES FOR CHILDREN

Our Platform is not directed to children under the age of 16. Children under the age of 16 are prohibited from creating accounts on our Platform on their own behalf. A parent or legal guardian may create an account, register a phone number, or submit registered information, including health information, on behalf of a child of any age. Before we collect Personal Information about a child under 13, we require verifiable parental consent as required by the Children's Online Privacy Protection Act (COPPA). We do not sell or share the Personal Information of consumers we know to be under the age of 16, and we do not use such information for targeted advertising. Please contact us if you believe your child under 16 has engaged in prohibited use of our Platform, so that we may delete their Personal Information.

We collect the following categories of Personal Information about children when submitted by a parent or legal guardian: name, phone number, and health information such as allergies, medical conditions, medications, mental health conditions, and substance use information. We use children's Personal Information solely to: (1) transmit it to emergency service personnel when an emergency call is placed from a registered phone number; and (2) operate, maintain, and secure the Platform. We share children's Personal Information with the following third parties for these purposes: emergency agencies (including public safety answering points, emergency communication centers, and first responders), RapidSOS, Inc. (to deliver information to emergency agencies), and Twilio, Inc. (to verify phone numbers during registration). If your child places an emergency call from the phone number you have registered on their behalf, the relevant phone number, call details, and location information may be collected directly from your child and transmitted to an Emergency Agency for emergency response purposes. Parents may consent to the collection and use of their child's Personal Information without consenting to its disclosure to third parties, except where such disclosure is integral to the emergency profile service.

Parents or legal guardians may at any time: (1) review the Personal Information we have collected about their child; (2) request correction of inaccurate information; (3) request deletion of their child's Personal Information; or (4) withdraw consent to further collection, use, or disclosure. We will honor deletion requests within 30 days. Parents or legal guardians may exercise these rights by emailing privacy@emergencyprofile.org or writing to Emergency Health Profile Association LLC, Attn: Data Request, 167 Madison Avenue, Suite 205 #615, New York, NY 10016. Parents or legal guardians may have additional controls over Personal Information they have submitted about their children, as described in the “Your Privacy Choices” section.

INFORMATION SECURITY AND GEOFENCING

We do not use geofencing technology to identify, track, or collect data from consumers seeking healthcare services, or to send notifications or advertisements related to consumer health data or healthcare services.

EHPA has implemented security measures designed to protect the confidentiality, integrity, and availability of your Personal Information. We maintain administrative, technical, and physical safeguards appropriate to the nature of the Personal Information we process, including the use of Transport Layer Security (“TLS”) to encrypt our Platform and Services. We restrict access to Personal Information, including health information, to employees and contractors who need access to perform their duties and who are subject to confidentiality obligations. We also require our Service Providers to implement appropriate security and data protection measures. No method of transmitting or storing data is completely secure, however. If you have a security-related concern, please contact support@emergencyprofile.org.

FOR USE IN THE UNITED STATES ONLY

At this time, our services are only available to users in the United States. All data is hosted in the United States and only shared with emergency service personnel in the United States.

CHANGES TO THIS POLICY

This Policy may be updated from time to time to reflect changes in EHPA's operational practices or regulatory requirements. If we make material changes to this Policy, we will post an updated Policy to our Site and notify you via reasonable means, such as by email and/or providing a notice on our Site, to give you an opportunity to review the revised Policy before deciding if you would like to continue to use the Services. We encourage you to periodically review this page for the latest information on our privacy practices.

HOW TO CONTACT US

Please contact us with any questions or comments about this Policy, your Personal Information, our use and disclosure practices, or your choices and control over your Personal Information by email at privacy@emergencyprofile.org.

You can also contact us by writing to this address:

Emergency Health Profile Association LLC, 167 Madison Avenue, Suite 205 #615, New York, NY 10016.