Privacy Policy

Effective November 4, 2026

XPI LifeGuard (“LifeGuard,” “we,” “us”) is a digital emergency medical ID service operated by XPI Solutions. This policy explains what we collect, how we use it, and the choices you have. We built LifeGuard to share the right information in an emergency while keeping you in control of it.

What LifeGuard is — and isn't. LifeGuard is a digital medical ID. It is not a monitored 24/7 emergency response service. It does not detect falls, track your location on its own, or dispatch responders. In an emergency, always call 911.

Information we collect

Account: the email address and password you use to sign in.
Profile: the member's name, preferred name, date of birth, and preferred language.
Medical information you add: conditions, allergies, medications, instructions, blood type, and similar details. This is self-reported by you and is not clinically verified.
Emergency contacts: the names and phone numbers you choose to add.
Devices: the NFC cards, wristbands, pendants, or QR tags you link to a profile.
Caregivers: the email addresses you invite to help manage a profile, and the permissions you grant them.
Activity & audit logs: records of notification requests and sensitive changes, kept to operate the service securely.
Payment: if you subscribe, payments are processed by Stripe. We do not store your full card number — Stripe does.

How the emergency page works

Each profile has a unique, non-sequential emergency link (for example, /id/LG-XXXXXXXX). Anyone with the link — typically because they tapped or scanned your card during an emergency — can view the information you have marked public. Items you mark caregiver-only or private are never shown on the public emergency page. If an ID is suspended, its page shows no medical information. The emergency page is not indexed by search engines.

How we use your information

To provide the emergency ID and show the information you choose to make visible.
To send a family notification only when you or someone assisting you requests one, and only to contacts who have opted in and been verified.
To operate, secure, and support the service, and to prevent abuse.
To process subscriptions you choose to buy.

We do not sell your personal or health information, and we do not use it for advertising.

When a notification is sent

A “sent” notification means a message was handed to our SMS provider. We cannot and do not claim that a contact received, read, or acted on it. Standard message and data rates may apply to recipients.

Who we share information with

We share information only as needed to run the service:

Supabase — secure database and hosting for your data.
Twilio — delivery of SMS family notifications you request.
Stripe — payment processing for subscriptions.
The public, by your design — people who tap or scan your card see the information you marked public. That is the purpose of the card.

We may also disclose information if required by law or to protect someone's safety.

Your choices and rights

View, edit, or delete your profile, medical items, and contacts at any time from your dashboard.
Control the visibility of every item (public, caregiver-only, or private).
Invite or revoke caregivers at any time.
Suspend a lost card so its page stops showing information.
Delete your account and associated data by contacting us (see below).

Depending on where you live, you may have additional rights to access, correct, or delete your information, or to receive notice of certain data incidents. We honor applicable requests.

Data retention

We keep your information while your account is active and as needed to provide the service. When you delete your account, we delete the associated profile, medical information, and contacts, except limited records we must keep for legal, security, or accounting reasons.

Security

Data is encrypted in transit, access is restricted, and medical data is held in a database separate from other XPI products. No system is perfectly secure, but we work to protect your information and to limit what the public emergency page can ever reveal.

Children

LifeGuard is intended for use by adults, including parents or guardians managing a profile for a child or dependent under a family plan. We do not knowingly collect information directly from children without a parent or guardian.

Changes to this policy

We may update this policy as the service evolves. We will post the new effective date here and, for material changes, provide additional notice.

Contact

Questions or requests about your privacy? Email support@xpisolutions.com.