← Pandu SOS · Português · Español · Français · Deutsch · Italiano
Is a medical QR code safe?
Updated 31 October 2026 · Fábio José dos Santos
It depends on how it is made. Many medical QR codes keep your health data open on a website or in a password-protected database. With Pandu, your card is encrypted on your own phone before it leaves it, and the key stays only inside your QR. Not even Pandu can read it.
How Pandu protects you
- Encryption on your phone: the card is locked with AES-GCM, using a random 128-bit key created only for your QR.
- The key sits after the "#" in the QR link, a part that browsers never send to any server.
- The server keeps only a random code and the encrypted data. Without the key it is unreadable, even to Pandu.
- No sign-up, no email and no password: there is no account to hack and no user list to leak.
- Only you can edit or delete the QR, from your phone or with your recovery code. If you delete it, the QR stops working at once.
- No cookies and no Google Analytics. Pandu only counts visits, with no personal data.
| Common risk with medical QRs | How Pandu answers it | |
|---|---|---|
| Where the data lives | Card open on a website or database | Card encrypted on the phone; the server only sees unreadable data |
| Account and password | A login that can leak or be hacked | There is no account and no password |
| Who sees the card | Anyone who finds the link online | Only whoever scans the QR, which holds the key |
| Nobody scans it | If the QR is not read, nothing shows | The lock screen and wallet card also show the essentials in writing |
| Fake QR | A swapped sticker leads to a scam site | A Pandu QR always opens usepandu.com.br and never asks for a login or payment |
| Delete everything | Hard or impossible | In "More options → Delete my data" |
Frequently asked questions
Is a medical QR code safe?
It depends on where the data is kept. With Pandu, the card is encrypted with AES-GCM on your phone and the key stays only inside the QR. The server keeps only unreadable data, with no name and no account, and not even Pandu can read it.
Can someone find my QR online?
No. The address has a random code far too long to guess, and even if someone found it, without the key inside the QR the data would stay unreadable.
Does Pandu sell or use my data?
No. Pandu cannot read your card, has no sign-up, uses no cookies or Google Analytics and does not sell data. It only counts visits, with no personal data.
Does whoever scans my QR see everything?
They see what you wrote on the card. So add only what helps in an emergency: allergies, medicines, health conditions and a family contact. Do not add ID numbers, your address or passwords.
What if I want to delete everything?
In "More options → Delete my data", Pandu deletes the card from your phone and the encrypted copy from the server. From then on, whoever scans the QR sees that it was turned off.
How do I know a Pandu QR is genuine?
Before opening it, the camera shows the address: a Pandu QR always leads to usepandu.com.br. Pandu never asks the person scanning for a login, password or payment.
Do I have to trust Pandu's server?
No. With the dynamic QR, the server only keeps encrypted data it cannot open. And if you prefer, "Text only (offline)" mode keeps the card inside the QR itself, without any server; in that mode the card is not encrypted, and whoever scans reads it straight from the QR.
Pandu SOS is not a medical service and does not replace emergency care. Technical details are in the privacy policy.