Privacy Policy

• Account info: email, name, district, and (for donors) blood group and last donation date.
• Donor profile: phone number, availability, and an opt-in consent_share_phone flag.
• Blood requests: patient alias, blood group, hospital, district, contact phone for the requester.
• Hospital/blood-bank profiles: contact info for verified hospital staff who claim a listing.
• Usage & device data: approximate location (only if you grant browser permission), and basic analytics.

• To match active blood requests with nearby donors of the right group.
• To send push notifications for matching requests (only if you enable them).
• To show hospitals and active requests on the public map.
• To prevent abuse, fraudulent emergencies, and paid-blood activity.

Donor phone numbers are never shown publicly. They are shared with a requester only when you, the donor, tap "I can donate" on a specific request, or when you have set consent_share_phone = true. Requester contact phones are shown only to signed-in users on the request page.

The live map asks for your browser location to centre the map on you. We do not store your precise location; it stays in your browser.

• With hospitals: if a hospital owner verifies a request, they see the requester's contact details.
• With donors: a request's alias, group, hospital and contact phone are shown to signed-in donors.
• With service providers: our database, push-notification, and map providers, under standard data agreements.
• We never sell your data.

You can delete your donor profile or any request from your dashboard. Email hello@bloodundo.in to delete your full account.

We use row-level security so that only authorised users can read sensitive rows, and we keep secrets out of the browser. No system is perfectly secure — please use a unique password and report anything suspicious.

Privacy questions: hello@bloodundo.in.