MIPACE is designed to make selected support information quick to reach without placing that information on the physical device itself. Security is built in layers, and you remain in control of what a tap can show.
No online service can promise that information is impossible to copy or that every risk can be removed. MIPACE therefore combines technical controls with clear choices and honest guidance about what should be made public.
Control stays with you
- The physical device does not store your profile details.
- You choose which completed sections are visible.
- One update changes the current view across linked devices.
- A lost device can be stopped without disabling the others.
Every tap is limited
- Each tap creates a new, hard-to-guess temporary viewing address.
- Standard links expire after 30 minutes.
- Child-profile links expire after 15 minutes.
- Access is recorded in an administration-only security trail.
What is stored on a MIPACE device?
The NFC device contains a MIPACE device address. It does not contain an editable copy of the person’s medical, support or contact information. When a compatible phone reads the device, MIPACE checks its current status and creates a separate temporary viewing session for the profile it is allowed to open.
Why does every tap create a temporary link?
The fixed address on the device is not the address used to keep viewing the profile. A successful tap creates a fresh temporary address. Standard sessions have an absolute 30-minute expiry and child-profile sessions expire after 15 minutes. After expiry, reopening or refreshing that temporary address no longer displays the profile; the physical device must be tapped again.
This reduces the usefulness of an old address saved in browser history or copied from an earlier session. It does not make information impossible to record while it is legitimately visible, so only publish details you are comfortable making available to somebody who finds and taps the device.
What can the profile owner control?
Adding information and making it public are separate decisions. The profile owner selects which sections may appear, can review the public view, and can change or remove information whenever needed. Information not selected for public display is not rendered on the tapped profile.
A priority emergency contact can be made immediately callable and short profile keywords can appear directly beneath the person’s name. This helps the useful information stand out without requiring the whole profile to be made public.
What is different for a child profile?
A child profile is managed by a parent, guardian or other authorised adult. Its public view uses the child’s first name rather than displaying a surname. The date of birth stays hidden unless the managing adult deliberately chooses to show it, and the temporary viewing session is reduced to 15 minutes.
What happens when a device is lost?
The account holder can report the individual device lost. Its profile access is stopped immediately and its fixed address no longer opens the assigned profile. Other devices connected to the same profile continue to work. This matters because a lost keyring should not require a family to remove the profile from every other device.
Are taps recorded?
MIPACE keeps an administration-only access record for security review. It can include the device, time of access, network address, browser information and a unique session reference. Those technical details are not displayed on the public profile.
How are profile photographs handled?
Uploaded profile photographs are moved into protected private storage and delivered through a controlled media route rather than an ordinary direct public-file address. MIPACE also provides an internal review and flagging process for profile images.
How do I know I am using the real MIPACE site?
- The primary MIPACE address is mipace.life and uses https://. The retained official UK address, mipace.co.uk, redirects you to the primary site.
- Do not enter a password after following a link from an unexpected message. Open MIPACE directly instead.
- MIPACE support will not ask for your password, complete payment-card number or an unnecessary copy of a full medical record.
- If a browser displays a security, deceptive-site or certificate warning, do not bypass it. Stop and report what you saw to MIPACE.
What MIPACE security does not replace
MIPACE helps somebody reach information chosen by the profile owner. It does not replace emergency services, professional medical advice, first aid, safeguarding, supervision or an organisation’s own safety and information-governance duties. A device must be noticed and used with a compatible phone and suitable connectivity.
If you believe information may have been exposed, accessed improperly or affected by a weakness, use the MIPACE security and privacy concern form.
In an emergency: Call 999 where there is an immediate risk to life. Do not delay urgent help while looking for or using a MIPACE device.