Privacy Policy
In short: Palmcard does not collect your personal information. There are no accounts and no Palmcard servers holding your data. What you enter stays on your phone, encrypted, and we never see it.
What Palmcard stores, and where
Everything you add to Palmcard is stored only on your phone: the people you care for, their allergies, medications, conditions, notes, doctors, emergency contacts, appointments, patient portal links, and photos of insurance cards, IDs, and medication labels.
This information is encrypted with AES-256 before it is saved. The encryption key is kept in your phone's secure storage (the iOS Keychain or Android Keystore). If your phone's own backup is turned on, the encrypted information may be included in that backup, which is handled by Apple or Google under their terms, not by us.
Palmcard does not store passwords for patient portals or pharmacies. When you open one, your phone's password manager handles the sign-in.
What we collect
Nothing. Palmcard has no sign-up, no analytics, no advertising, and no tracking. We do not sell, share, or receive your information, because it never leaves your phone unless you choose to send it somewhere.
Camera, photos, and text recognition
Palmcard uses your camera, or photos you choose, only to capture insurance cards, IDs, and medication labels. Reading the text on a medication label happens on your phone using its built-in text recognition. The photos are not uploaded.
Face ID and PIN
Face ID and fingerprint unlocking are handled entirely by your phone. Palmcard never receives your biometric data. Your backup PIN is stored on your phone as a salted hash, not as the PIN itself.
Reminders
Appointment reminders are scheduled on your phone. On the lock screen they show only a name and a time, never the doctor or the reason for the visit.
Emergency NFC tags
When you write an emergency tag, the details you choose (for example, allergies, key medications, conditions, and emergency contacts) are stored inside the tag's link. Anyone who taps the tag can read those details, the same as a medical ID bracelet. Insurance cards, ID photos, and prescription numbers are never written to a tag.
Tapping a tag opens a page on this website that displays the details. They travel in the part of the link after the "#" symbol, which web browsers do not send to any server, so the details never reach us. The page uses no analytics or tracking. Like any website, our web host may keep standard technical logs of visits, such as the time of a request and the visitor's IP address, but not the details from the tag.
Printing and sharing
When you print or share a summary or card copies, Palmcard creates the document on your phone and hands it to the printer or app you choose. A shared PDF is not encrypted, and once shared it is outside Palmcard. Share it only with people and offices you trust.
Links to other services
Buttons for patient portals and pharmacies open those services in your browser or their own apps. Their privacy policies apply to what you do there.
Children
Parents and guardians may use Palmcard to keep health information about their children. Palmcard does not collect information from anyone, including children.
Deleting your information
You can delete any person, medication, photo, or appointment in the app at any time. Deleting the Palmcard app removes everything it stored on your phone. Because we never receive your information, we have no copy to delete.
Changes to this policy
If this policy changes, we will update this page and its effective date. If Palmcard ever adds a feature that sends information off your phone, such as optional syncing between family members, we will explain it here before it is released, and it will be your choice to turn it on.
Contact
Questions about privacy: support@palmcardapp.com