Skip to content

Website offline

The NHS Scotland Covid Check app is no longer active. If you are looking for information about accessing your COVID Vaccination Status then you should visit this page on NHS Inform:

Terms and conditions

By using the COVID Check App, you agree to these Terms.

1. Introduction

1.1. Welcome to the terms of use (“Terms”) for the NHS Scotland COVID Check app (“COVID Check App”). [ ] (‘[ ]’, ‘we’, ‘our’) has overall responsibility for the COVID Check App, which has been developed by, and will be operated by, NHS Education for Scotland (‘NES).

1.2. These Terms apply to the COVID Check App only.

2. Purpose of the COVID Check app

2.1. The purpose of the COVID Check App is to allow the device (onto which the COVID Check App is downloaded) to scan and read a 2D barcode produced by a trusted authority, which contains information associated with an individual’s ‘COVID Status’. The information confirms that the individual has been fully vaccinated against COVID-19 or has met negative testing or natural immunity requirements and can be used by the individual to demonstrate their COVID Status for the purposes of international travel, or for domestic purposes which the Scottish Government may approve from time to time.

2.2. The COVID Check App is only designed for use in scanning and checking COVID Status 2D barcodes produced by trusted authorities and must not be used for any other purpose.

2.3. The COVID Check App is provided by [ ] free of charge, and it is expressly prohibited to attempt to sell or license use of the COVID Check App to any person, or to include the COVID Check App as part of a paid-for service or product.

3. How to use the COVID Check app

3.1. To use the COVID Check App, you must first download it from the Apple App store or Google Play store. You should refer to the terms of use and privacy notices applicable to each app store when visiting those stores to download the COVID Check App.

3.2. Upon navigating to the 2D barcode verifier, you will first be met with the initial landing page. This page is the first page in the application where you are always able to navigate back to or progress to the 2D Barcode verifier.

3.3. The “Check 2D barcode” button will navigate you to the 2D Barcode verifier where you will be able to direct the camera at a user’s COVID certificate. To do this, the user's 2D barcode, which will be either on their device or printed out, will need to be placed inside the four blue square guidelines.

3.4. The 2D barcode represents the COVID Status of an individual person. It follows a set international standard designed by eHealth Network (Part of the European Commission), and all developers who develop COVID related applications follow this set standard.

3.5. App permissions are used to securely store public keys that are used to check a 2D barcode has been signed by a trusted authority. These permissions are not used to store any data related to the user or app usage. The storage used does not hold any personal data.

3.6. The COVID Check App reads 2D barcodes that store personal data and allows you to read and display this information. You use this information to check the COVID status of the individual. The information must not be used for any other purpose. The information gathered from the 2D barcode is never stored or transmitted by the COVID Check App.

4. Your right to use the COVID Check app

4.1. The COVID Check App was developed by [ ], and it and its content belong to [ ] or its respective licensors as appropriate, and it is protected by intellectual property laws. As long as you comply with these Terms, you have a personal, perpetual, non-exclusive, non-transferable, revocable, limited licence to use the COVID Check App for your own personal use. We reserve all other licence rights not expressly permitted under these Terms.

4.2. For the avoidance of doubt, any reproduction, representation, distribution, modification, adaptation or translation of the COVID Check App and its content, in whole or in part, is prohibited, except within the limit of these Terms or with the express authorisation of [ ].

5. Our liability to you

5.1. The COVID Check App is provided on an "as is" basis and, to the extent permitted by law, we make no representations, warranties or guarantees, whether express or implied that the COVID Check App will function as intended. We also cannot guarantee that the COVID Check App will be available on an uninterrupted basis, secure or error or virus free, or that defects will be corrected.

5.2. Without limitation, we will not be liable to you for:

5.2.1. any use of the COVID Check App that does not comply with these Terms;

5.2.2. any business loss (including but not limited to loss of profits, revenue, contracts, anticipated savings, data, goodwill or wasted expenditure);

5.2.3. any loss or damage arising from an inability to access and/or use the COVID Check App;

5.2.4. any indirect or consequential losses that were not foreseeable to both you and us when you commenced using the COVID Check App; or

5.2.5. any loss or damage caused by a virus or other technologically harmful material that may infect your device or data due to your use of the COVID Check App.

5.3. Nothing in this clause 5 excludes or limits our liability for death or personal injury arising from our negligence, or our fraud or fraudulent misrepresentation, or any other liability that cannot be excluded or limited by law.

6. Continuity

6.1. We reserve the right to suspend, terminate or otherwise alter access to some or all of the COVID Check App at any time and without notice.

7. Security

7.1. If you discover a potential security vulnerability or suspect a security incident related to this Service, please report it to

8. Miscellaneous

8.1. We may revise these Terms at any time and your continued use of the COVID Check App will be deemed acceptance of such revised Terms. Any such revisions take effect when this page is published.

8.2. These Terms are governed by the laws of Scotland.

8.3. These Terms do not provide rights to, and may not be enforced by, any third party.

8.4. Each of the clauses in these Terms operates separately. If any part of these Terms is determined to be invalid or unenforceable then the remainder of these Terms will remain in full force and effect.

Last updated: 07 September 2021

NHS Scotland Covid Check app privacy policy

The NHSS COVID Check App supports NHS Scotland's Test & Protect service. The App scans and reads QR codes containing an individual’s COVID vaccination status and automatically checks whether the QR code has been issued by a trusted authority.

The App is intended for use by appropriately appointed personnel (the "Verifier") who work in environments where verification of an individual's COVID status is required to be carried out. It is not intended for use by the general population.

The data processing

The data are processed within the App on the mobile device of the Verifier. The App reads the QR code presented by the individual and displays the data to the Verifier. The data are deleted once the verification process is complete. No personal data is collected, stored or transferred by the App.

What data are processed about the visitor

The App reads the QR code, presented by an individual, which contains personal and other data and allows the Verifier to read this information within the App only. The personal data contained in the international QR code and used by the App are:

  • your name
  • your date of birth
  • the QR code expiration date
  • your dates of vaccination
  • what vaccine you received
  • last test result
  • recovery data i.e. data that represents an individual who has recovered from COVID-19. This data is based on your test results where applicable.

Mobile app permissions

Certain device permissions are required to run the COVID Check App. These are required on the Verifier’s device only. An individual presenting a QR code to be scanned does not require any device permissions to be granted.

For both Android and iOS (Apple), this is a permission to allow the COVID Check App to use the phone's camera to scan a QR code. If the Verifier denies permission, a screen appears specifying that the permission is required for the App to work.

Internet usage


The app will need periodic access to the internet to download updates to the "public key" security mechanism used to decode the QR codes presented to it. It is recommended you do this every 24 hours or you may find valid QR codes fail to scan successfully.

File usage

When the Verifier downloads the App, they have explicitly given permission for file usage within the App. However, file usage is only used to store public keys into secure internal storage on the device where the App is installed which then allows the App to verify QR codes from a trusted authority. The file usage permission is not used to store any data related to the Verifier’s personal or application usage. Nor is the permission used to store any data read from a QR code.

Metrics collected

Metrics on the usage of the app are captured. These are anonymous and cannot be used to identify you. The metrics are sent to Microsoft App Centre. Using this data the NHS Scotland technical team can make useful observations such as error frequencies, request frequencies, service usage and oversight of the general activity. The metrics collected are:

  • Active Users
  • Daily sessions per user
  • Session duration
  • Device type
  • Country the user is in
  • Language used
  • App version per user
  • Public key used.

Changes to our policy

We keep our privacy policy under regular review.
This version was last updated on 10 September 2021.

NHS Education for Scotland (NES) are committed to easy access for everyone. We're constantly working towards improving the accessibility of this website to ensure we provide equal access to all of our users.

The NHS Scotland COVID Check application was first launched in September 2021. 

This application is run by NHS Education for Scotland . We want as many people as possible to be able to use this application. For example, that means you should be able to:

  • zoom in up to 300% without the text spilling off the screen
  • navigate most of the application using just a keyboard
  • navigate most of the application using speech recognition software

AbilityNet   has advice on making your device easier to use if you have a disability.

How accessible this application is

We know some parts of this application are not fully accessible:

  • the app form labels are currently not fully optimised for mobile screen-reader use

We will look to fix these issues within the next few iterations of the application.

What to do if you can't access parts of this application

If you need information on this application in a different format like accessible PDF, large print, easy read, audio recording or braille: 
We’ll consider your request and get back to you in 5 days.

Enforcement procedure

The Equality and Human Rights Commission (EHRC) is responsible for enforcing the Public Sector Bodies (Applications and Mobile Applications) (No. 2) Accessibility Regulations 2018 (the ‘accessibility regulations’). If you’re not happy with how we respond to your complaint contact the Equality Advisory and Support Service (EASS)  .

Contacting us by phone or visiting us in person

Our offices have audio induction loops, or if you contact us before your visit we can arrange a British Sign Language (BSL) interpreter. If you are deaf and would like to communicate with us without visiting the office please contact us using the email address below and we can use contactSCOTLAND-BSL interpretation service   to discuss your issues. 

Telephone: 0141 223 1400 (ask for Colin Sanders) 
Address: 2 Central Quay, 89 Hydepark Street, Glasgow, G3 8BW

Technical information about this application’s accessibility

NHS Education for Scotland is committed to making its application accessible, in accordance with the Public Sector Bodies (Applications and Mobile Applications) (No. 2) Accessibility Regulations 2018. 

This application is partially compliant with the Web Content Accessibility Guidelines version 2.1 AA standard  , due to the non-compliances listed below.

Non accessible content

The content listed below is non-accessible for the following reasons:

Labels and descriptions not appropriate for screen reader use

Some of our form elements are missing appropriate labels and descriptions which will make it difficult for those using screen readers to describe what the element is. This fails WCAG Success Criterion 2.4.6 Headings and Labels  

How we tested this application

This application was tested on the 7th September 2021. The test was carried out by a member of staff from NES Digital using a combination of:

  • Android mobile phone with TalkBack and Select To Speak screen-reader software
  • Apple Ipad with VoiceOver screen-reader software

Within this we tested:

  • homepage 
  • pages with form elements
  • pages with text 

What we are doing to improve accessibility

We plan to have this application fully compliant with the Web Content Accessibility Guidelines version 2.1 AA standard by the end of the 2021/2022 financial year.

This statement was prepared on 8th September 2021.