Terms, privacy and disclaimers
1. Terms of use
By using qrmedic.com ("QR Medic") you agree to these terms. If you do not agree, do not use the service. You must be at least 18, or use QR Medic under the supervision of a parent, guardian or employer.
The free designer runs in your browser. Codes it makes are "static": the link is written into the pattern and does not pass through QR Medic. Pro, Team and Event Pass codes are "dynamic": they point to a qrmedic.com short link that redirects to the destination you choose, which lets you change it later and see scan counts.
You are responsible for what your codes point to, for keeping your manage links and account key private, and for test-scanning every code before you print or publish it. Anyone who has a manage link or account key can change where the related codes point. Paid plans and Pro features may be in beta and can change; we will give reasonable notice of material changes on this page.
2. Medical disclaimer
In an emergency, call 911 or your local emergency number.
QR Medic is an informational tool. It is not a medical device, does not diagnose or treat any condition, and does not provide medical advice. The medical ID card and lock-screen image hold only what you type, are created in your browser, and are not reviewed by anyone. They do not replace an official medical alert ID, your medical records, a clinician's advice, or the Medical ID feature built into your phone. First responders are not required to scan QR codes and practices vary.
Everything encoded in a medical QR code can be read by anyone who scans it. Include only what a first responder needs. Do not include Social Security, insurance or other identification numbers. Keep it current; outdated allergy or medication information can be dangerous. The author is a physician, but using QR Medic does not create a doctor-patient relationship.
3. Privacy
Free designer: what you type and upload (links, logos, medical details) stays in your browser. It is not sent to or stored on our servers.
Dynamic codes: we store each code's destination, its name, your optional routing settings, and a one-way fingerprint (hash) of its manage key and account key. When someone scans a dynamic code we record the date and time, approximate city, region and country (supplied by our network provider, Cloudflare), device type and operating system. We do not store IP addresses, names or precise location of the people who scan your codes, and we do not use tracking cookies.
Link pages: a link page shows what its owner enters (a title, photo, buttons, phone and email). We count taps on each button the same way we count scans, without IP addresses. If the owner turns on the contact form, we store what visitors choose to type (name, email, phone and message) so the owner can read it in their dashboard. The page owner is responsible for how they use those messages and must follow the privacy laws that apply to them. Visitors: do not send medical or other sensitive information through a link page.
Weekly summary email: if you turn it on, we email your account address a summary of scans, button taps and the number of new messages once a week. Every email has a one-click link to stop it, and you can turn it off in your account at any time.
Your browser: the Pro pages remember your codes and account key in your browser's local storage so you do not have to retype them. You can remove them at any time with "Remove" or "Sign out on this device".
Payments: when checkout opens, payments are handled by Stripe. We never see or store your full card number. We keep your email address and a Stripe reference to manage your plan.
Sharing: we do not sell personal information, and we never sell or share the messages visitors send through a link page. We share data only with the providers that run the service (Cloudflare for hosting and data storage, Stripe for payments) or when the law requires it. Scan data is kept while your code exists. To delete a code or an account and its data, email us from the address on your account.
Health information: QR Medic is not a HIPAA covered entity or business associate and is not designed to store protected health information. Do not put patient information in a dynamic code's name or link. Clinics should use the free static designer for anything patient-specific.
4. Acceptable use
Do not use QR Medic to point to content that is illegal, deceptive, or harmful, including phishing, pages that collect passwords or payment details under false pretenses, malware, fraud, harassment, impersonation of real people or organizations, or content that sexualizes minors. Do not use a link page contact form to collect passwords, payment details, government ID numbers or health information. Do not use QR Medic to hide another link shortener, to send spam, or to overload the service. We may pause or remove any code or account that breaks these rules, without notice or refund. Paused codes show a notice instead of redirecting. Report a bad code to DRGPT@harveycastromd.com.
5. Subscriptions and refunds
Pro and Team renew automatically each month or year until you cancel. You can cancel at any time and keep access until the end of the paid period. Event Pass is a one-time purchase that includes 90 days of editing and analytics.
The QR Medic promise: when a plan ends for any reason other than a breach of the acceptable use rules, your existing dynamic codes keep redirecting to the last destination you set. Editing, new codes and new analytics stop. We will keep honoring this for as long as QR Medic operates, and if QR Medic ever shuts down we will give at least 90 days' notice so you can replace printed codes.
If QR Medic does not work for you, email us within 14 days of your first payment for a full refund. Prices are in US dollars and do not include taxes, which may be added at checkout.
6. Warranty and liability
QR Medic is provided "as is" and "as available", without warranties of any kind. We work to keep redirects online, but we do not guarantee that the service will be uninterrupted or error-free, or that every phone or scanner will read every code. To the fullest extent the law allows, QR Medic and its operator are not liable for indirect, incidental or consequential damages, lost profits, or reprint costs, and our total liability for any claim is limited to the amount you paid us in the 12 months before the claim. These terms are governed by the laws of the State of Texas, USA.
7. AI-built tools and third-party parts
Parts of QR Medic were built with the help of AI coding tools and reviewed and tested by a human ("human plus AI"). Like all software, it may contain mistakes we have not found; please report anything that looks wrong. QR generation uses an open-source library by Kazuhiko Arase (MIT license); the scan check uses jsQR (Apache 2.0) and PDF export uses jsPDF (MIT). Interface icons come from Lucide (ISC license) and caption fonts from Google Fonts (SIL Open Font License); caption fonts load from Google's servers when you pick one. See third-party licenses. QR Code is a registered trademark of DENSO WAVE INCORPORATED. All other product names belong to their owners.