Read this first
Relay Arc is not an emergency service and not a medical device. In a life-threatening situation, call 911 immediately. Do not rely on this app.
Call 911Relay Arc is free and is run as a nonprofit project. We do not sell your data, we do not share it with advertisers, and we do not use it to build advertising profiles. We collect the least we can get away with while still being useful in an emergency.
Two things are worth knowing before the detail: • The emergency card at /rights and /card is made in your browser and stays there. It is not uploaded, there is no account, and closing the tab discards it. • If you create an account, the medical details you enter are stored so they can be sent ahead to a hospital during an emergency. That is the whole point of the account, and it means real health information leaves your device.
Relay Arc is operated by an individual maintainer as a nonprofit project. Contact for any privacy question, request or complaint: relay.arc.org@gmail.com. We answer privacy requests within 30 days.
Information you type in:
• Name, email address and password. Needed to have an account at all.
• Date of birth. Used to pick the correct clinical thresholds, because some of them differ for ages 12 to 19.
• Medical conditions, medications, allergies and blood type. Sent ahead to a hospital during an emergency, and shown on the emergency card.
• Emergency contacts, including their name and phone number.
• Daily check-in answers, symptoms and vital signs you record.
• Your cardiologist or care team, if you add them.
Information collected automatically: • Device type, browser and operating system. • IP address, which reveals approximate location. • Which features you used and when, so we can tell what is broken.
Location, treated separately because it is the most sensitive: • Precise device location is read only when you start an emergency, and only to find hospitals near you and produce directions. It is not tracked in the background and it is not recorded when the app is idle.
If you are in the UK, the EU or another region with similar law:
• Health data is a special category of personal data. We rely on your explicit consent, given when you accept this policy during signup and again when you enter medical details. You can withdraw consent at any time by deleting your account or by writing to us.
• For account security, fraud prevention and keeping the service running, we rely on our legitimate interests.
• Where the law requires us to keep something, we rely on our legal obligation.
Withdrawing consent does not undo processing that already happened, and it does not reach data a third party has already received. Section 6 explains that limit.
We use other companies to run the service. Each of them has its own privacy policy and its own security practices, and we do not control what they do once data reaches them.
• Supabase. Database, accounts and authentication. Receives everything stored in your account.
• Vercel. Hosting and content delivery. Receives your IP address and request data.
• Groq. Large language model processing, currently openai/gpt-oss-20b. Receives the text of check-ins and symptom notes when a summary or classification is generated.
• Resend. Sends account email such as the signup confirmation. Receives your email address.
• Jitsi and 8x8. Video consultations, if you use one. Receives the call itself.
• OpenStreetMap Nominatim and OSRM. Address lookup and driving directions. Receives location during an emergency.
• MapLibre and map tile providers. Draws the map. Receives the area you are looking at.
We do not sell personal information, and we do not share it for cross-context behavioural advertising. If you are a California resident, that means there is nothing for you to opt out of on that front.
Some features send your text to Groq to produce a summary or a suggested category. Two limits are worth stating plainly:
• Output from a language model can be wrong. It is not a medical opinion and no clinical decision should rest on it.
• Once text has been sent to a third-party model provider we cannot retrieve or delete it. Do not type anything into a check-in that you would not want to leave your device.
The part of the app that decides how urgent something is does not use a language model. It is arithmetic on published thresholds, it runs on your phone, and it produces the same answer every time.
Our providers operate servers outside your country, including in the United States. Where the law requires a safeguard for that transfer, we rely on the standard contractual terms those providers offer. If you would rather your data did not leave your region, do not create an account. The emergency card works without one.
We use your browser storage rather than tracking cookies. Specifically:
• An authentication token, so you stay signed in.
• Emergency card contents and form drafts, so a half-finished card survives a reload.
• Small preferences such as the last screen you used.
We do not use advertising cookies and we do not run third-party analytics or tracking pixels.
We do count page views, on our own server. One row per page per day, holding a number. No visitor identifier, no session, no IP address, no referrer and no user agent, which means two people opening the same page on the same day are indistinguishable from one person opening it twice. There is nothing in that table that can be traced to you. We honour Do Not Track and Global Privacy Control automatically, and the notice at the bottom of the site lets you switch the counting off.
You can clear all of this at any time through your browser settings, which will sign you out.
• Account and medical data: while your account exists, and for up to 30 days after you delete it, so an accidental deletion can be undone.
• Emergency records: kept while the account exists, because a history of past events is clinically useful.
• Server logs: about 30 days.
• Anything already sent to a third-party provider: governed by that provider, and outside our control.
Data is encrypted in transit with HTTPS, access is controlled by row-level database rules, and authentication uses short-lived tokens. No system is perfectly secure and we are not going to claim otherwise. If we discover a breach affecting your data, we will tell affected users and any regulator we are required to notify, without undue delay.
Relay Arc is not a HIPAA covered entity and not a business associate. If your clinician uses this to coordinate your care, their obligations are theirs and not ours. Do not treat this app as your official medical record. Keep that with your clinician.
Whatever region you are in, you can ask us to:
• Show you what we hold about you.
• Correct anything wrong.
• Delete your account and its data.
• Send you a copy in a portable format.
• Stop processing, or withdraw consent.
• Object to a particular use.
Write to relay.arc.org@gmail.com. We will not charge you, and we will not treat you differently for asking. If you are in the UK or EU you can also complain to your data protection authority, and if you are in California you can use an authorised agent.
This app is built for people with heart rhythm and dysautonomia conditions, and those conditions affect teenagers. Some clinical thresholds in the app are specific to ages 12 to 19, so pretending the service is adults only would be dishonest.
You must be at least 13 to hold an account. If you are under 18, a parent or guardian has to set the account up and stay involved in how it is used. We do not knowingly collect data from anyone under 13. If you believe a child under 13 has an account, write to us and we will delete it.
If we change this policy in a way that materially affects you, we will say so in the app rather than quietly updating this page. The date at the top always reflects the current version.
relay.arc.org@gmail.com