Privacy policy

The controller of the personal data collected through SAPHIR is Expand LLC, 2915 Ogletown Road, Newark, DE 19713, USA, owner and operator of the service.

For any enquiry relating to the processing of your data, you can contact us through SAPHIR’s official support channel.

SAPHIR may process account information, authentication data, profile information, medical records entered by the user, emergency contact data, documents, QR access settings, device activity and security logs.

Users decide what information they enter and which sections are visible through the emergency QR or the shared access features.

We process data to provide SAPHIR’s account, medical record, emergency QR, documents, security, notifications and support functions.

We also process technical and security data to prevent abuse, protect accounts, investigate incidents and maintain the integrity of the service.

Processing is based on the user’s consent when creating the account and using the service, on compliance with applicable legal obligations and on the legitimate interest in the security and integrity of the service.

Users may withdraw their consent at any time, which may mean that they can no longer use certain features of the service.

SAPHIR does not sell personal medical information to third parties.

Information may be displayed to people who scan or access a valid QR or a shared link, according to the user’s active settings at that time.

Trusted service providers may process limited data where necessary to host, protect, send notifications or operate the platform.

Stripe acts as data processor for payment and billing data. SAPHIR does not store card numbers or banking credentials.

Email, SMS, WhatsApp and voice call providers process the data strictly necessary to deliver SOS protocol alerts and account notifications.

Google and Apple process authentication data when the user chooses to sign in with their accounts, in accordance with their respective policies.

If you choose to link your Google Calendar, SAPHIR requests only the permission to create, modify and delete events (calendar.events) and uses it solely to mirror in your Google calendar the appointments and reminders you create in SAPHIR. We store your access token and your Google email encrypted to maintain the link; we do not read other calendars, we do not use this data for advertising, we do not sell or transfer it to third parties, and no team member reads it except with your consent or where legally required.

You can unlink at any time from Calendar → Google Calendar → Disconnect, which deletes the token and revokes the permission, or revoke it at myaccount.google.com/permissions.

Events are sent to Google only with a generic label (for example, “Medical appointment”), the date and the time; never the title, the notes or any clinical data.

SAPHIR’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

For any question about privacy or about this data, write to contact@saphircare.com.

Location is only obtained when the user activates the SOS protocol or expressly shares their position. Location is not recorded in the background.

When an SOS alert is activated, the live location is shared with the emergency contacts configured by the user, together with the link to their SAPHIR file.

Fall detection can only work while SAPHIR is open and on screen: when the screen is turned off, the browser stops reading the accelerometer.

When registering, the user confirms that they are over 18 years of age or that they are acting with the consent of their legal guardian.

Linked profiles and family accounts make it possible to manage the records of relatives or dependants. The person administering the profile is responsible for having the necessary authorization to process that information.

Each member of a family plan keeps their own private record; the plan administrator manages the subscription, not the clinical content of the other members.

Every consultation of the record by QR, personal code or shared access is recorded, with date and origin, in the user’s audit log.

The audit log is available in the dashboard so that the user can detect unrecognized access early, and it is kept for the period necessary to fulfil that purpose.

Where data is transferred to providers established outside the jurisdiction of origin, appropriate safeguards will be applied in accordance with the data protection regulations in force.

SAPHIR endeavors to work with providers that offer safeguards equivalent to those required by the applicable data protection legislation.

Users can update their records, change their privacy settings, revoke access where available and request deletion of their account from the account settings or the support channel.

Some technical, audit, backup or legal records may be retained for a limited period for reasons of security, continuity or applicable legal obligations.

In accordance with applicable regulations, users may request access to, rectification, erasure, restriction of processing, portability or object to the processing of their personal data.

Privacy requests must include enough information to verify the account and understand the action requested. We will respond within the time limits established by the applicable regulations.

You also have the right to lodge a complaint with the competent data protection supervisory authority in your jurisdiction.

After a subscription is cancelled, data is securely kept for 30 days. After that period, the account returns to the Free plan with its limits and no data is deleted.

Permanent deletion of the account can be requested from the account settings or the official support channel.

SAPHIR may use session cookies and similar technologies to keep the session active, remember language preferences and ensure account security.

Third-party advertising tracking cookies are not used without the user’s express consent.

You can manage cookies from your browser settings, although disabling certain cookies may affect the functionality of the service.

SAPHIR may update this privacy policy from time to time to reflect changes in data processing practices or in applicable legislation.

Users will be informed of relevant changes through the available channels. Continued use of the service after the update implies acceptance of the changes introduced.