Notice of Privacy Practices

Tapn.vip's Health Hub, Emergency Med-ID, and Health Institution services handle health information with administrative, physical, and technical safeguards aligned with the HIPAA Privacy Rule and Security Rule. Health institutions using our B2B platform act as covered entities; Tapn.vip operates consistent with business associate obligations for data we process on their behalf.

• Encryption at rest: All vitals, medications, and doctor visit records are encrypted using Fernet (AES-128-CBC + HMAC) before storage.
• Encryption in transit: All traffic uses TLS 1.2+.
• Access controls: Role-based access; your health record is visible only to you and staff you explicitly authorize.
• Emergency Med-ID: Only the fields you mark as "emergency visible" are exposed on your NFC emergency page — never your full record.
• No sale of data: We never sell, rent, or share health information for advertising.

• Access & Portability: Export your complete health record at any time (JSON download, Health Hub → Export).
• Amendment: Edit or correct any entry in your record directly.
• Deletion: Delete individual entries or your entire health record at any time.
• Accounting of disclosures: Request a report of any disclosures of your health data.
• Restriction: Control exactly which fields appear on your Emergency Med-ID.

We use health information only to: (1) provide the Health Hub service you requested; (2) display your chosen Emergency Med-ID fields when your NFC tag is scanned; (3) share with a health institution you have explicitly joined; (4) comply with a lawful court order or as required by law. We do not use health data for marketing.

In the unlikely event of a breach of unsecured health information, we will notify affected users without unreasonable delay and within 60 days as required by the HIPAA Breach Notification Rule (45 CFR §§ 164.400–414) and Wisconsin's data breach law (Wis. Stat. § 134.98, 45-day notice).

If you believe your privacy rights have been violated, contact our Privacy Officer via the in-app Support chat or the Support page. You may also file a complaint with the U.S. Department of Health & Human Services, Office for Civil Rights. You will not be retaliated against for filing a complaint.