1IN25FOUNDATION

Privacy policy

Last updated 22 October 2026.

Stay Safe Side is a free tool from the 1in25 Foundation. It holds health information about children and adults with epilepsy, so we keep as little as we can, protect it carefully, and never sell or share it. Ever.

What we keep

If you make a card

• Your email address, so you can sign in and manage your cards.
• What you put on the card: a first name, an age or age group, what their seizures look like, how long they last, what helps, rescue medicine (its name, amount, how and when to give it), weight (if you add it, so paramedics can work out a dose), everyday medicines (name, amount and time of day), up to 3 emergency contacts (name, relationship, phone), the condition, allergies, the GP and neurologist, anything else paramedics should know, when to call 000, a photo if you choose to add one, and who filled the card in.
• When you agreed to our Terms, and the exact wording you agreed to.

We never ask for a surname, date of birth, address, Medicare number or medical documents. Please don't add them.

If you share a card with another parent/caregiver

• The email address of the other parent/caregiver you add (a card can have two parents/caregivers). We email them once to say they've been added. They can edit the card and keep seizure notes; only you can add or remove them, or delete the card.

If you keep seizure notes

• What you write about each seizure: when it started, how long it lasted, what happened, and whether rescue medicine was given or an ambulance was called. Also who added each note.
• Seizure notes are private. Only you and the parents/caregivers you added can see them. They are never shown on the card, in its PDF or in any email, and they are deleted with the card.

If you join a care team from a card link

• Your first name, email and how you know the person (for example Grandparent or Teacher). The family can see your first name and relationship, and can remove you. You can leave at any time.
• Any seizure you save after the timer: when it started, how long it lasted, the type of seizure, what happened, when rescue medicine was given, when 000 was called and when the ambulance arrived, and your first name. Everyone on the care team can see the seizures from the last 7 days in the card's Diary. Only the family's parents/caregivers can see every seizure, in the full seizure diary.

Where you are, during a seizure

• When the seizure timer opens, your phone may ask to share your location. If you say yes, the timer shows your street address (so you can read it out to 000) and adds a map link to the text you send the family. To turn the location into an address we pass it to Esri (ArcGIS) and OpenStreetMap. We never store your location or keep a record of it. If you type in your exact address, it's kept only on your phone, so it's ready next time you're at the same place.
• When someone starts the seizure timer on a card, we tell that card's parents/caregivers straight away with a phone notification, if they turned alerts on (not the one who started the timer). It has a private link to follow the seizure live. While it happens we keep the start time, the first name of the person timing, the address (if the phone found one) and each step done, so the live page can show them. This is deleted after 24 hours. For alerts, we keep a code your phone's browser gives us (from Apple, Google or Mozilla) so we can reach that phone; turning alerts off in your Account deletes it.
• If someone saves a seizure from the card link without joining the care team, we keep the first name they type with that seizure.

Your PIN and staying signed in

• A 4 digit PIN, stored only in scrambled form, protects editing, the seizure diary and the care team. The card itself never needs it.
• So the card opens in one tap from your home screen, your phone stays signed in for a year from the last time you used it. You can sign out at any time.

If you download the poster for a school, club or workplace

• Your email, the name of your school, club or workplace and what kind it is, and when you agreed to our Terms. Your email goes to the 1in25 mailing list only if you tick the news box.

If you follow a card

• Your email address, which card you follow, and when you agreed.

If you say yes to 1in25 news

• Your email address and how you joined (card owner or card follower) go to the 1in25 mailing list. Nothing about any card ever goes to the mailing list.

To keep things safe

• Sign in codes and sign ins are stored only in scrambled form. To stop misuse we count tries per email and internet address, also in scrambled form.

If you register for the seizure first aid card

• Whether you're an organisation or a person, the organisation's name and type (or your first name), your email, and that you agreed to the Terms and Privacy Policy. We use it to know who has the card and to tell you about important changes to it. The first aid card itself works without registering. To be taken off, email us or delete your account.

Counting, to understand how it's used

• We count how many cards are made, timers started and people join a care team, by country and state (for example "Australia, Queensland: 12 cards"). The country and state come from the internet connection, not your location, and only the totals are kept: never which card, person, town or address.

Who can see a card

Anyone who has a card's link can see it. That's what makes it work in an emergency: no sign in, nothing in the way. So only share the link with people who look after the person. The link is long and random so it can't be guessed, it never contains a name, and search engines are told never to list it.

You can turn a link off, make a new link (the old one stops working straight away), or delete the card at any time.

Copies saved on phones

So a card still opens with no signal, a phone that opens a card keeps a copy of it. When you turn a link off, make a new link or delete a card, each phone deletes its copy the next time it has signal and opens the card or any Stay Safe Side page. A phone that never gets signal again can't be told, so it keeps its copy. Printed cards and downloaded PDFs can't be deleted by us.

Who sees your information

• The people you share the card's link with.
• A small number of 1in25 Foundation people who run the service. They can see who has made a card or joined a care team (names, emails and dates) and how many seizures are logged, but not what happened in a seizure, medicines or conditions, except when needed to fix a problem.
• The companies that run the service for us, only to do that: Netlify (the website, and where cards, accounts, seizure diaries and photos are kept), Resend (sending emails) and our mailing list tool. Some of these keep data outside Australia, mainly in the United States.

Followers never see anything except the card itself. Card owners see how many people follow a card, but never their emails.

Emails

• Sign in codes, only when you ask for one.
• If you follow a card: a short email when the plan changes, with the person's first name and a link. Never health details. Every email has a link to stop them.
• 1in25 news, only if you ticked the box. Unsubscribe any time. Unsubscribing from news never affects your cards or card update emails.

Deleting

From your cards you can delete a card, or your whole account and all its data. Deleting really deletes it from our systems, straight away. If you also said yes to 1in25 news, you can choose to stop that too, or keep getting it.

Questions or complaints

Email foundation@1in25.co. If you're not happy with our answer, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.