TRAVELMEDID
Android privacy policy
Updated 30 September 2026
On this page
About this policy
TravelMedID helps you keep a personal medical record and choose what to share in an emergency. This policy covers the medical-only edition, version 1.1.1 (build 18) and later versions with the same data practices. Earlier app editions and the website have separate notices linked below. Contact TravelMedID at traveler@travelmedid.com.
Your information stays on your device
You may enter identity and passport details, nationality, medical conditions, allergies, medications, vaccinations, height and weight, emergency contacts, physician and insurance details, notes, destinations, photos and documents. These are used to display your card, manage your records and prepare the emergency information you select. Private records are stored in an encrypted vault on your device, without a TravelMedID account or automatic upload to a TravelMedID cloud database. Only enter information you are entitled to use.
Passwords and device unlock
Your card password protects the vault. Optional device authentication uses the phone's biometric or passcode prompt and device-protected keys. TravelMedID does not receive your fingerprint, face scan or device passcode. There is no email password reset: recovery requires a usable encrypted backup and its password, or another available unlock method. Device security and a strong password remain important.
Emergency sharing and QR codes
Emergency sharing is optional. You choose the fields, photo and documents available in a separate read-only snapshot that can be opened without your card password. That snapshot is encrypted on the device using a device key that does not require private-vault unlock. Anyone who opens the emergency screen can read the information you selected. The optional home-screen widget can display selected identity and contact details.
What a QR code shares
The QR contains only its supported selected text summary, such as your name, blood type, allergies, conditions, medications, emergency contact and insurance provider. It does not contain photos, uploaded documents, passport numbers or your full private record. It opens the TravelMedID website without requiring the app. The summary is in the link fragment, which is not sent in the normal HTTP request, but the receiving page and anyone with the link can read it. The website host receives normal connection information such as IP address. Printed or copied codes are readable snapshots and cannot be recalled by editing the app.
Optional lock-screen banner
On supported devices, the optional AccessibilityService responds to window-state changes and checks whether the screen is awake and locked to show an emergency shortcut. It does not retrieve other apps' screen contents, record gestures or send accessibility events to TravelMedID. After your explicit consent and enabling the service in device settings, double-tapping the banner opens only your chosen emergency information; it does not unlock your phone or private vault. Turn it off in the app or revoke the service in device settings. Availability varies by device and may require the first device unlock after a restart.
Insurance and external links
The insurance button opens the Allianz partner website in your browser. The link includes an agency referral code for attribution. Allianz handles the quote details, eligibility, purchase and policy information you enter under its own privacy policy, and receives normal connection information. TravelMedID does not automatically send your medical card to the insurer. Visiting a link or receiving a quote does not activate insurance. Other website and contact links also open the services you choose.
Files, backups and device services
The system picker gives the app access to files you select. Exported backups are encrypted with a backup password and contain your complete saved record and attachments. To avoid losing recovery information, data saved by retired features in older records is preserved only as inactive private data in the encrypted vault and full backups; it is not displayed in emergency sharing or sent to a network service. PDFs and printed cards are not encrypted. Your selected storage or sharing provider receives files you export to it. Emergency phrases use the device's selected text-to-speech service; an online voice may send the selected phrase to its provider. The app does not supply your medical record to that service. Destination selection is manual and does not request GPS access. Phone links open the dialer; the app does not place calls automatically or read your contact book.
Retention, deletion and your choices
Local records remain until you delete them, clear app storage or uninstall. In Profile, choose Delete records from this device to remove the vault and emergency snapshot. Disable emergency sharing to remove access to the current local snapshot. Deletion does not remove exported backups, PDFs, printed cards, copies held by other people or information retained by an external provider. Export and check a backup before deletion if you want to keep your record. TravelMedID cannot retrieve or remotely delete your local vault; contact the relevant provider about information held by that provider.
Support and other data
The medical-only app includes no advertising or analytics SDK and does not collect advertising IDs or sell medical records. Emailing support shares your email address and message with TravelMedID and its email provider. Do not send passwords, recovery secrets or unnecessary medical documents. Support correspondence may be retained while handling your request and where recordkeeping obligations apply; email traveler@travelmedid.com to request its deletion. Hosting providers may retain connection logs under their own retention practices.
Policy updates
We update this notice when the app's data practices change and show the revision date above. Changes that require a new permission or consent are also presented in the app. This page does not replace the in-app emergency-sharing and accessibility consent controls.
Questions? traveler@travelmedid.com