PENDING LEGAL REVIEW — this text has not been approved by a lawyer. Highlighted parts are not decided yet.
Health Data Notice and Explicit Consent
Health information is special category personal data. Koruya stores it in the cloud only with your separate, explicit consent, which you can withdraw at any time. Not consenting switches off no emergency feature.
1. What information
If you choose to fill in the Emergency Profile: blood type, allergies, chronic conditions, medication, medical devices, a disability note, pregnancy status, organ donation and a doctor's note; and in the emergency profile your date of birth, gender, city/district, address hint, second phone, mobility, special needs and an emergency note. The medical card for responders, age / height / weight, and the medication backup and assistance needs plans can also hold health-related information. You do not have to enter any of it.
2. Where it is kept
- On your device (always): the health information you enter is encrypted on your phone with AES-256-GCM; the key is kept in the Android Keystore or the iOS Keychain. The medical card, medication backup and assistance needs plans never go to the cloud.
- In the cloud (only with explicit consent): if you consent, your emergency and medical profile is stored with your account at Supabase (EU, eu-west-1), so it comes back on a new phone. The server also refuses to write these tables without a consent record.
- In the web app: health information you enter at app.koruya.app is kept only in that browser, encrypted with a non-exportable key; it is not uploaded.
3. Giving and withdrawing consent
- Consent is asked in a separate dialog on the Emergency Profile screen. Accepting the terms of use or the KVKK notice at sign-up does not count as health consent.
- Consent is per account and tied to the version of the consent text you agreed to; if the text changes in substance you are asked again.
- You can withdraw consent on the same screen at any time. Uploads stop at once and the emergency and medical profile rows in the cloud are deleted (without a connection the deletion is retried when the connection returns). The copy on your device stays.
- Withdrawing consent does not affect processing before it.
4. Who sees it
- Only you see the cloud copy (row-level access rules). The Koruya team does not read your health information; it is not used for advertising or profiling.
- You start a responder handoff packet or an SOS share yourself, and you choose whether medical information goes into the packet. In an "I'm safe" check-in, "add medical summary" is stored only as a flag.
- Crash reports (only in a version that includes them) never contain health information.
5. Legal basis and retention
The legal basis for the cloud copy is explicit consent (KVKK Art. 6/2, GDPR Art. 9(2)(a)) [legal confirmation]. The cloud copy is deleted when you withdraw consent or delete your account. The records of giving and withdrawing consent (an append-only history) are deleted with the account today [whether a minimal record is kept after account deletion as proof of consent — legal decision].
6. Important
Koruya does not give medical advice and is not a medical device. You are responsible for the accuracy of what you enter. In an emergency follow the instructions of medical teams. Questions and requests: privacy@koruya.app.