Privacy Policy

1. Who we are

SafeTag is a product of ViiPTag OÜ, a company registered in Estonia. We operate the website nfcsolution.eu and the bracelet profile system accessible via QR code and NFC scan.

Contact: support@viiptag.ee

2. What data we collect and why

We only store data that you choose to enter when setting up a bracelet profile. This may include:

• Child's or person's name and age
• Emergency contact names and phone numbers
• Medical information (allergies, blood type, conditions, medications)
• Additional notes you choose to provide
• Your email address (used only for sending login links — never shared)

This data is displayed when someone scans the bracelet QR code or NFC chip, so that emergency responders, teachers, or bystanders can reach the right contacts immediately.

We do not collect location data, payment information, or any data beyond what you explicitly enter into the profile form.

3. How long we keep your data

All profile data is stored only for the duration of the active bracelet subscription. When a bracelet expires or is reset, all associated personal data is permanently and irreversibly deleted from our systems — including the profile, emergency contacts, medical information, and login records.

We do not archive, anonymise, or retain any personal data after deletion.

4. Who can access your data

• Anyone who scans the bracelet can view the public profile (name, contacts, medical info). This is intentional — the purpose of SafeTag is instant access in an emergency.
• Only the registered owner (verified via magic-link email) can edit or delete the profile.
• ViiPTag OÜ staff have administrative access for support purposes only.

We do not sell, rent, or share your personal data with third parties for marketing or any other purposes.

5. Third-party services we use

• Supabase — database hosting (EU region). Stores profile data on our behalf under a data processing agreement.
• Resend — transactional email. Used only to send login links to the profile owner's email address.
• Vercel — web hosting. Processes requests to serve the website.

None of these services receive data beyond what is technically required to operate the platform.

6. Your rights

Under the GDPR, you have the right to access, correct, or delete your personal data at any time. You can edit your profile directly through the bracelet management link, or contact us at support@viiptag.ee to request full deletion at any time — without waiting for the subscription to expire.

7. Cookies and tracking

We use a single session cookie (session_id) to keep you logged in to the profile editor. This cookie contains no personal data — only a random session identifier. It expires after 14 days.

We do not use advertising cookies, analytics trackers, or any third-party tracking scripts.

8. Contact

Questions about this policy or requests regarding your data: support@viiptag.ee