Privacy Policy
Who we are
ForLife Health ID is operated by ForLife Global Pty Ltd (“ForLife”, “we”). ForLife is a health-data access facilitator that acts only on your instructions. We are not a healthcare provider, medical facility, insurer or medical device; we do not create, edit, interpret or verify medical records, and we do not give diagnoses, treatment recommendations or medical advice. Privacy contact: privacy@forlifeglobal.health.
What we collect
- Account: email address, password (stored only as a salted hash), name, date of birth, optional phone number.
- Identity verification: the name and date of birth you enter and a reference from the identity-verification provider. We do not keep images of identity documents.
- Health information: laboratory results (currently sexual-health / STI screening: HIV, chlamydia, gonorrhoea, syphilis, hepatitis B and C) that you direct a laboratory or health network to release to ForLife; the original source payload and a normalised copy; the Health ID card derived from them; any medication, allergy or emergency-ID details you add.
- Authorisations and sharing: which sources you connected, which cards or yes/no proofs you shared, with whom (for partner apps), for how long, and when you revoked them.
- Security logs: sign-in events and every access to your data (time, event type, device origin), kept in a tamper-evident hash-chained log.
Not collected: precise or coarse location, contacts, photos, browsing history, advertising identifiers, device identifiers, HealthKit or device-sensor data. The app contains no advertising, analytics or crash-reporting SDKs. Biometrics (Face ID / fingerprint) are checked by your device’s operating system; ForLife receives only a yes/no and never receives or stores biometric data.
How we use it
To sign you in; to confirm results being retrieved are yours; to render your Health ID cards; to answer, with your explicit one-time approval, a single aggregate yes/no question (for example “screened negative within 90 days”) from a person or partner app you choose; and to keep an audit trail you can inspect. We do not sell personal data, do not use it for advertising or profiling, and do not use it to train AI models.
Who we share it with
- People you choose: a share link, QR code, NFC tap or AirDrop/Quick Share proof reveals only the yes/no answer or card you selected, only until the expiry you chose, and only until you revoke it. Proofs carry no name, results, dates or laboratory details.
- Partner apps you approve: when a partner (for example a dating app) asks a question, nothing is released until you approve it in ForLife. The partner receives a signed yes/no and a pairwise identifier that cannot be linked across partners — never your results, identity or email. You can revoke any grant instantly; the partner is notified.
- Sources you authorise: to retrieve your results we send the laboratory or network your name and date of birth to match your record.
- Service providers: hosting (encrypted database in the region that applies to your data) and identity-verification vendors under contract. No third party receives data for its own purposes.
- Legal requirements: only where a law or binding order compels us, and we will tell you unless legally prohibited.
New York users: HIV-related information is protected by NY Public Health Law Article 27-F; any recipient of a card containing such information is shown a redisclosure notice.
Security
Data is encrypted in transit (TLS) and at rest. Health data is stored in the region required by its source and never leaves it. Cards and proofs are digitally signed (ES256) so recipients can verify they are genuine and unaltered. Every access is recorded in a hash-chained log so tampering is detectable. Sensitive in-app actions require your device biometric or passcode.
Retention and deletion
Your data is kept while your account is active. Delete your account at any time in the app (Profile → Delete account) or at app.forlifeglobal.health/delete-account. Deletion immediately erases your account, cards, share links, partner grants, authorisations and retrieved results, and revokes every outstanding proof. A minimal security audit trail (timestamps and event types, without clinical content or name) is retained for six years as a security record and then erased. Results you disconnect without deleting your account are erased within the retention window of their jurisdiction (New York: 30 days).
Your rights
You can view, export (FHIR R4 / JSON) and delete your data in the app at any time without contacting us, and revoke any authorisation, share or partner grant instantly. Depending on where you live you have additional rights under the Australian Privacy Act 1988, GDPR, CCPA/CPRA, the NY SHIELD Act or the Thai/Singapore PDPA (access, correction, portability, objection, complaint to your regulator). Write to privacy@forlifeglobal.health; we respond within 30 days. Corrections to the medical record itself must be requested from the originating provider.
International transfers
ForLife Global Pty Ltd is incorporated in Australia. Health data is processed only in the region required by its source; account data may be processed in Australia, the United States or Singapore under contractual safeguards.
Children
ForLife is for adults (18+, or the age of majority where you live). We do not knowingly create accounts for minors and delete any we discover.
Changes
We will post changes here and notify you in the app before material changes take effect. See also our Terms & Conditions.