Privacy Policy

1. Who we are

REACT ERN ("REACT", "we") operates a platform that connects people experiencing a medical emergency with nearby volunteer medical professionals. This policy explains what we collect and how we handle it. REACT supplements emergency services and never replaces 911.

2. Information we collect

Account information (name, email, phone). Medical profile information you choose to provide (allergies, medications, conditions, blood type, emergency contacts). Location data at the time you trigger an alert. Responder credential and verification information. Incident records and, for responders, device and location data during an active response.

3. How we use it

To dispatch nearby verified responders, share the minimum necessary medical information with the responder assisting you during an active incident, verify responder credentials, maintain incident records, and operate and improve the service.

4. Protected health information (PHI)

Medical profile data is sensitive. We restrict access to a patient's medical record to the responder actively assigned to that patient's incident, and every such access is logged for audit. We follow HIPAA-aware practices and are pursuing the appropriate Business Associate Agreement(s) with our infrastructure providers.

5. Sharing

We share your medical profile only with the verified responder assigned to your active incident, and with emergency services as needed. We do not sell personal or medical information. Service providers (hosting, payments, messaging) process data on our behalf under contract.

6. Security

Data is encrypted in transit and at rest, access is role-restricted, and administrative actions and PHI access are logged. No system is perfectly secure; we work to protect your information using reasonable safeguards.

7. Your rights

You may view and update your medical profile at any time, and you may delete your account and associated personal and medical data from your account settings. Deletion is processed promptly; certain incident records may be retained in de-identified form for legal and safety purposes.

8. Retention

We keep your information while your account is active and as needed to provide the service, comply with legal obligations, and maintain safety records.

9. Children

REACT is not directed to children under 13, and we do not knowingly collect their information without a parent or guardian.

10. Contact

Questions or requests: hello@reactern.app.