Effective Date: September 15, 2026
Last Updated: September 20, 2026

Tappy Technologies LLC, a Washington limited liability company, operates MediTappy and the TappyLinks platform used to host MediTappy profiles.

This Consumer Health Data Privacy Policy explains how Tappy Technologies LLC (“Company,” “MediTappy,” “TappyLinks,” “we,” “us,” or “our”) handles health-related information that you choose to place within a MediTappy profile.

This policy applies specifically to Consumer Health Data processed through MediTappy and health-related profiles hosted through TappyLinks.

Our general TappyLinks Privacy Policy governs Account Information and other personal information that is not Consumer Health Data.

If this policy and the general TappyLinks Privacy Policy address the same information and that information qualifies as Consumer Health Data, this policy controls with respect to that information.

This policy replaces the prior MediTappy Consumer Health Data Privacy Policy issued in the name of Plus Six Solutions. Beginning September 15, 2026, Tappy Technologies LLC is the business that decides why and how Consumer Health Data is processed for MediTappy. Plus Six Solutions is a separate sole proprietorship that may provide hosting and technical services to the Company under a written agreement. It is not the operator of MediTappy and is not authorized to use Consumer Health Data for its own purposes.

1. The MediTappy Privacy Model

MediTappy is designed around a simple principle:

You provide your health information. You control your health information. We use it only to provide the MediTappy service you requested.

MediTappy does not build a medical profile about you from advertising networks, data brokers, outside databases, or unrelated activity.

You choose whether to create a MediTappy profile.
You choose what health information to enter.
You can view, change, or delete the information you entered through your account.

We process that information only as necessary to host, maintain, secure, and display the MediTappy profile you requested.

We do not use Consumer Health Data or other Profile Content for:

• Marketing;
• Advertising;
• Targeted advertising;
• Email marketing;
• Marketing segmentation;
• Affiliate tracking;
• Affiliate commissions;
• Cross-brand marketing;
• Google Analytics;
• Advertising audiences;
• Data-broker activities; or
• Unrelated business purposes.

We do not sell Consumer Health Data.

2. What Is Consumer Health Data?

For purposes of this policy, “Consumer Health Data” means personal information that identifies or can reasonably be associated with an individual and relates to that person’s physical or mental health.

The precise legal definition may vary depending on applicable law, including Washington’s My Health My Data Act and similar state consumer-health-data laws.

Because MediTappy allows users to enter health and emergency information, information contained within a MediTappy profile may qualify as Consumer Health Data.

We treat health-related information entered into MediTappy according to this policy regardless of whether a particular item would ultimately fall within every applicable statutory definition.

3. Consumer Health Data You May Choose to Provide

MediTappy allows you to decide what information you want available through your emergency profile.

Depending on the available profile fields and the information you choose to enter, this may include:

• Medical conditions;
• Diseases or diagnoses;
• Allergies;
• Sensitivities;
• Medications;
• Medication instructions;
• Medical treatments;
• Medical procedures or surgeries;
• Blood type;
• Medical devices or implants;
• Disabilities;
• Mobility or accessibility needs;
• Functional or care needs;
• Symptoms;
• Relevant medical history;
• Healthcare provider information;
• Emergency medical instructions;
• Treatment or care instructions;
• Mental or behavioral health information;
• Reproductive or sexual health information, if you choose to provide it;
• Gender-affirming care information, if you choose to provide it;
• Health measurements or vital information, if you choose to provide it; and
• Other medical, health, care, or emergency information that you voluntarily enter.

You are not required to complete every available field. You decide what information to provide.

4. Where Consumer Health Data Comes From

Consumer Health Data in a MediTappy profile is provided directly by:

• You;
• A parent or legal guardian;
• An authorized caregiver;
• A person managing a profile for a dependent; or
• Another person with appropriate authority to manage the profile.

We do not purchase Consumer Health Data from data brokers.
We do not obtain Consumer Health Data from advertising networks.
We do not create health profiles based on your browsing or purchasing behavior.
We do not use artificial intelligence or other automated systems to infer medical conditions from unrelated personal information.
We currently do not automatically import your medical records from healthcare providers, pharmacies, health insurers, electronic health record systems, wearable devices, or similar outside health-data sources.

5. Why We Process Your Health Information

When you create a MediTappy profile and enter health information, you are requesting that MediTappy store and make that information available through the emergency profile associated with your MediTappy product.

We process Consumer Health Data only as reasonably necessary to provide that service. This includes:

• Creating your MediTappy profile;
• Storing information you enter;
• Allowing you to view and manage your information;
• Allowing you to edit or delete your information;
• Hosting your profile through TappyLinks;
• Connecting your profile with your MediTappy product;
• Connecting the profile to its QR code or profile URL;
• Displaying the information you have chosen to provide when the profile is accessed;
• Maintaining and securing the profile;
• Maintaining the TappyLinks platform;
• Backing up systems for service continuity and disaster recovery;
• Troubleshooting technical problems;
• Providing customer support;
• Preventing unauthorized access, fraud, or abuse;
• Protecting the security and integrity of our systems; and
• Complying with applicable legal obligations.

We do not collect or process your health information for unrelated commercial purposes.

6. No Separate Health Profile Is Created About You

The information contained within MediTappy is the information you or an authorized person chose to enter.

We do not separately analyze your Profile Content to create another health record, consumer profile, advertising profile, or marketing profile about you.

We do not use your medical conditions, allergies, medications, diagnoses, or other Profile Content to determine what products or services should be marketed to you.

7. How Your Emergency Profile Works

MediTappy is specifically designed to make information you select accessible when someone accesses your MediTappy profile.

A person can reach the profile through the methods below. Viewing any profile information always requires the PIN printed on the tag:

• Scanning the QR code on a MediTappy product;
• Entering the PIN printed on the MediTappy ID Tag;
• Opening the associated profile URL; or
• Using another access method provided by MediTappy.

The MediTappy ID Tag uses a QR code and does not contain an NFC chip. The entire MediTappy profile always requires the PIN printed on the tag before any profile information can be viewed, whether someone scans the QR code or visits the profile URL directly. A viewer does not need to sign in to a TappyLinks account, but must enter the PIN. Anyone who has both the profile link and the printed PIN may be able to view the profile.

People who access a MediTappy profile could include first responders, emergency medical personnel, healthcare professionals, caregivers, family members, friends, teachers, coaches, coworkers, bystanders, or other people who obtain access to the MediTappy product or profile address.

This accessibility is an intended function of MediTappy.

You determine what information you choose to enter into your emergency profile.

Do not enter information that you do not want someone accessing your MediTappy profile to be able to view.

8. Consumer Health Data Made Available Through Your Profile

The categories of Consumer Health Data made available to someone who accesses your MediTappy profile depend entirely on the information you choose to enter and make available. That may include medical conditions, allergies, medications, blood type, medical devices, disabilities or care needs, healthcare provider information, emergency instructions, and other health information you choose to provide.

We do not add additional medical information to your profile for disclosure to the person accessing it.

9. What Happens After Someone Views Your Profile

When someone accesses your MediTappy profile, that person can view the information you have made available through it.

MediTappy cannot control what another person does after viewing that information. For example, another person may remember it, write it down, photograph it, screenshot it, copy it, record it, or share it.

Removing information from MediTappy prevents it from continuing to display on the active profile. We cannot retrieve copies independently made by another person before the information was removed.

10. We Do Not Sell Consumer Health Data

Tappy Technologies LLC does not sell Consumer Health Data.

We do not sell MediTappy Profile Content to advertisers, data brokers, insurance companies, healthcare marketers, affiliate marketers, other Company brands, or other third parties.

We do not exchange Consumer Health Data for money or other valuable consideration as part of our business model.

11. We Do Not Use Consumer Health Data for Marketing

Information contained within a MediTappy profile is off-limits for marketing purposes.

We do not use Consumer Health Data to advertise products to you, select marketing messages, determine which marketing emails you receive, recommend products based on a medical condition, personalize advertising, create advertising or look-alike audiences, segment marketing lists, track affiliate referrals, calculate affiliate commissions, or market products or services from another Company brand.

This restriction applies to MediTappy Consumer Health Data as part of our broader policy that Profile Content stored within TappyLinks-hosted profiles is not used for cross-brand marketing or unrelated business purposes.

12. Google Analytics and Other Analytics

Tappy Technologies LLC may use Google Analytics for general website analytics as described in the TappyLinks Privacy Policy.

We do not intentionally provide the contents of MediTappy profiles to Google Analytics.

Medical conditions, allergies, medications, diagnoses, emergency instructions, and other substantive MediTappy Profile Content are not used for our Google Analytics reporting, marketing analysis, advertising audiences, or behavioral advertising.

We may process limited technical and operational information necessary to operate MediTappy, such as whether a page loads correctly, whether an error occurs, or whether functionality is operating as expected. We do not use those operational functions to analyze the medical meaning of your Profile Content.

13. Affiliate Programs

Tappy Technologies LLC may use affiliate or referral tracking elsewhere on TappyLinks.com to identify referrals, registrations, or qualifying purchases of physical products.

MediTappy Profile Content and Consumer Health Data are not used for affiliate tracking.

Affiliates do not receive access to a customer’s medical profile merely because they referred the customer.

Affiliate attribution and commissions are based on referral, purchase, or account-level information, not information contained within your MediTappy profile.

14. Email and Marketing Platforms

We may use Zoho and Hostinger Reach for certain communications as described in our general Privacy Policy.

Account-level contact information may be processed through these services where appropriate.

MediTappy Profile Content is not provided to Hostinger Reach for mailing lists, marketing segmentation, personalization, or promotional campaigns.

Your medical conditions, allergies, medications, diagnoses, or other Consumer Health Data are not used to determine marketing messages.

15. Payment Processors

Tappy Technologies LLC uses PayPal and may use Stripe or other processors for certain payment transactions.

Payment processors may receive account and transaction information necessary to process a purchase.

MediTappy Profile Content and Consumer Health Data are not provided to PayPal, Stripe, or other payment processors as part of payment processing.

Purchasing a MediTappy product and creating a MediTappy health profile are separate activities.

16. Hosting and Technical Processing

MediTappy profiles are hosted through the TappyLinks platform owned by Tappy Technologies LLC.

Plus Six Solutions, a separate sole proprietorship, provides hosting, ordinary repair, and backup services to the Company under a written services agreement. Servers used for those services are housed with infrastructure providers that currently include Hosting.com and Hostinger.com. Plus Six Solutions also maintains a home-office backup server used for disaster recovery.

Hosting and backup infrastructure may technically store, transmit, retrieve, back up, or otherwise process Profile Content because those functions are necessary to provide the MediTappy service.

Plus Six Solutions and infrastructure providers process Consumer Health Data only as service providers for Tappy Technologies LLC. That technical processing does not authorize them to use Consumer Health Data for their own marketing, advertising, analytics, affiliate programs, profiling, or unrelated purposes.

17. Access by Company and Service-Provider Personnel

Consumer Health Data is not available to Company or Plus Six Solutions personnel for general business, marketing, or sales purposes.

Access to Profile Content is limited to situations where access is reasonably necessary to provide support you requested, diagnose or resolve a technical problem, protect or maintain the Service, investigate suspected unauthorized access, abuse, or fraud, respond to a privacy request, comply with applicable law, or perform another function necessary to provide the MediTappy service.

Consumer Health Data is not accessed merely because it exists within a profile.

18. Company Brands and Separate Businesses

MediTappy and Tappy Links / TappyLinks are brands of Tappy Technologies LLC. They are not separate legal companies simply because they operate under different brand names.

Account-level information may be used internally by Tappy Technologies LLC as described in the general TappyLinks Privacy Policy.

Consumer Health Data and other Profile Content are not shared across Company brands for marketing, advertising, affiliate, promotional, or unrelated business purposes.

MediTappy Profile Content is processed through TappyLinks because TappyLinks provides the platform used to host the MediTappy profile.

Plus Six Solutions is a separate sole proprietorship and is not a brand of the Company. It may process Consumer Health Data only as a service provider as described in Section 16. We do not share MediTappy Consumer Health Data with Plus Six Solutions for Plus Six Solutions’ own business.

We do not share MediTappy Consumer Health Data with other separate legal entities except as described in this policy.

19. Other Disclosures

In addition to displaying information through your MediTappy profile at your direction and technical processing necessary to provide the Service, Consumer Health Data may be disclosed when reasonably necessary to:

• Comply with applicable law;
• Respond to valid legal process;
• Respond to a lawful government request;
• Protect against fraud or abuse;
• Investigate a security incident;
• Protect the security or integrity of our systems;
• Enforce applicable agreements; or
• Protect the rights or safety of our users or others.

We do not voluntarily disclose Consumer Health Data for unrelated commercial purposes.

20. Children and Dependents

An adult may create or manage a MediTappy profile for a child, dependent, family member, or another individual when that adult has appropriate authority or permission to do so.

By entering Consumer Health Data about another individual, you represent that you are authorized to provide and manage that information.

Profiles for minor children should be managed by a parent, legal guardian, or other appropriately authorized adult.

MediTappy is not intended for children under 13 to independently create and manage accounts. We do not knowingly allow children under 13 to create accounts for themselves.

21. You Control Your Health Information

MediTappy is designed to allow you to directly manage the health information you provide.

Through your account, you can generally view, add, change, correct, and delete the Consumer Health Data you entered.

These account controls are the primary way to manage Consumer Health Data stored within your MediTappy profile.

When you delete information from your active MediTappy profile, that information is removed from the active profile and is no longer displayed through MediTappy.

22. Data Retention and Backups

Consumer Health Data remains in your active MediTappy profile until you edit it, delete it, delete the applicable profile, or otherwise instruct us to remove it.

We do not retain Consumer Health Data indefinitely for marketing, analytics, advertising, profiling, or other unrelated purposes.

Deleted Information. When you delete Consumer Health Data through your account, we remove it from the active profile. We do not maintain a separate permanent archive of deleted MediTappy Profile Content.

System Backups. Deleted information may temporarily remain within system backups used for security, disaster recovery, and service continuity, including backups maintained on production systems and on the Plus Six Solutions home-office backup server.

System backups are not retained for longer than 60 days. Consumer Health Data that has been deleted from active systems but remains solely within a backup will be removed through the normal backup lifecycle within no more than 60 days.

Backup copies are not used for marketing, analytics, advertising, profiling, affiliate tracking, or other unrelated purposes.

23. Your Consumer Health Data Rights

Depending on applicable law, you may have rights concerning your Consumer Health Data in addition to the account controls described above. These rights may include the right to:

• Confirm whether we collect Consumer Health Data about you;
• Confirm whether we share or sell Consumer Health Data about you;
• Access Consumer Health Data concerning you;
• Obtain information about applicable third parties or affiliates with whom Consumer Health Data has been shared;
• Delete Consumer Health Data;
• Withdraw consent where consent is the basis for collection or sharing;
• Appeal certain decisions involving a Consumer Health Data request; and
• Exercise other rights provided by applicable law.

We do not sell Consumer Health Data.

24. How to Exercise Your Rights

For most MediTappy information, you do not need to submit a formal privacy request. You can use your existing account to view, edit, correct, or delete the information you entered.

If you wish to exercise a right that cannot be completed through your account, contact Tappy Technologies LLC using the method in Section 31.

Please identify the communication as a Consumer Health Data Privacy Request.

Do not send detailed medical information through an ordinary support message unless it is necessary to identify or resolve your request.

We may take reasonable steps to confirm your identity before providing, changing, or deleting Consumer Health Data. If you already have a TappyLinks account, we may use that account to help authenticate your request.

We will respond to qualifying requests within the time required by applicable law.

25. Appeals

If we decline to take action on a Consumer Health Data privacy request and applicable law gives you a right to appeal, you may request an appeal using the same contact method.

Please identify your request as a Consumer Health Data Privacy Appeal and reference the original privacy request.

We will review and respond to qualifying appeals within the time required by applicable law. If an appeal is denied, we will provide any additional information or complaint mechanism required by applicable law.

26. Withdrawal of Consent

MediTappy primarily processes the information you voluntarily enter because doing so is necessary to provide the MediTappy profile service you requested.

Where a particular collection, use, or disclosure instead relies upon your consent under applicable law, you may withdraw that consent for future processing.

Withdrawal of consent does not necessarily affect processing that lawfully occurred before the withdrawal.

You can also stop future processing of particular profile information by deleting that information through your account. If information is necessary to provide a MediTappy feature and you remove it, that feature may no longer provide the same functionality.

27. Future Uses of Consumer Health Data

We will not begin using Consumer Health Data for a new purpose unrelated to the MediTappy service described in this policy without first updating our disclosures and obtaining any consent required by applicable law.

If MediTappy begins collecting materially different categories of Consumer Health Data, we will update this policy and obtain any consent required before beginning that new collection or use.

28. Security

We use administrative, technical, and organizational safeguards designed to protect Consumer Health Data against unauthorized access, disclosure, alteration, loss, or destruction. Access is limited according to operational need.

No Internet-connected system can guarantee absolute security. You are responsible for protecting your account credentials.

Information you intentionally place within an emergency-accessible MediTappy profile is specifically intended to be accessible to people who obtain access through your MediTappy product or profile link.

29. Changes to This Policy

We may update this Consumer Health Data Privacy Policy to reflect changes in MediTappy, our technology, our practices, or applicable legal requirements.

When we make changes, we will update the “Last Updated” date. If changes materially affect how we collect, use, or disclose Consumer Health Data, we may provide additional notice or obtain consent where required by applicable law.

30. Relationship to the TappyLinks Privacy Policy

Our general TappyLinks Privacy Policy governs Account Information and other personal information processed through TappyLinks.

This Consumer Health Data Privacy Policy applies additional protections to Consumer Health Data contained within MediTappy and applicable health-related profiles.

Account Information may be used by Tappy Technologies LLC for legitimate administrative, customer-service, transaction, communication, and other purposes described in the general Privacy Policy.

Profile Content, including Consumer Health Data, is not used for cross-brand marketing, advertising, analytics, affiliate tracking, marketing segmentation, or unrelated business purposes.

If these policies conflict regarding Consumer Health Data, this Consumer Health Data Privacy Policy controls.

31. Contact Us

Questions or requests concerning this Consumer Health Data Privacy Policy may be directed to:

Tappy Technologies LLC
dba MediTappy / Tappy Links
Vancouver, WA
Email: support@tappylinks.com
Website: https://tappylinks.com

You may also use the privacy or support contact method provided on TappyLinks.com or MediTappy.com.

For a rights request, identify the message as a Consumer Health Data Privacy Request.
For an appeal, identify it as a Consumer Health Data Privacy Appeal.

32. Related Policies

This Consumer Health Data Privacy Policy should be read together with:

• The TappyLinks Privacy Policy;
• The TappyLinks Terms and Conditions;
• Any applicable purchase or service-specific terms.

MediTappy is a brand and service of Tappy Technologies LLC and uses the TappyLinks platform for digital profile hosting.