The fine print, plainly

Privacy policy

Version 1.1 · updated 2026-08-30

The short version. We store the minimum to connect donors with patients: names, phone numbers (encrypted), blood group, district. We never sell data, never publish numbers, and you can export, correct or delete everything yourself, any time. Chat messages exist to keep you safe from scams, they are scanned for payment talk and deletable.

What we store

Donors: name, mobile number (encrypted), blood group, gender, birth year, district/area, consent records, donation history (self-reported or centre-confirmed). Optional email for match messages.

Requesters: name, mobile number (encrypted), hospital, district, blood group, units, dates. Never patient names, diagnoses or medical records.

Chat (if you use it): messages between a requester and an accepted donor, stored up to 90 days after the request closes, then deleted, unless preserved for a safety investigation or legal order. Chat is automatically scanned for scam patterns (money/payment references, phone numbers, links) and coordinators can review flagged threads, this is the anti-scam design, not surveillance for any other purpose.

Push notifications (if you opt in): an anonymous subscription key for your device (never your number), used only to send you blood-request alerts you asked for, revocable with one tap.

What we never collect: addresses, Aadhaar or other ID numbers, medical documents, bank details (until a donation gateway exists, then only what payments legally require).

How it's protected

Phone numbers are encrypted (AES-256-GCM); even a database leak would not expose them.
Sign-in is your phone number, one SMS verification, and your own 6-digit code.
If you type your number into the register strip but do not finish, we keep that number to follow up with you. It is encrypted the same way, never shown publicly, and removed as soon as you finish registering or ask us to delete it.
Staff access requires a second factor (TOTP) and every sensitive action is written to an audit log.
Nightly encrypted backups, access-limited.

Who sees what

Your number is never public and never shown to requesters.
A coordinator sees it only for a request you accepted, only for that request.
Public pages show aggregate counts only (e.g. "1,200 active donors").
We do not sell, rent or share personal data with advertisers or data brokers. Ever.

Your rights

Under the Digital Personal Data Protection Act, 2023 you can access, correct, complete, update or erase your data, withdraw consent as easily as you gave it, and nominate someone to exercise your rights if you cannot. From your donor profile, one tap: export your data (JSON), withdraw consent (anonymized within 72 hours), or delete your account (immediate and permanent). You may also ask us by phone/email via the contact page. Unresolved? You can escalate to the Data Protection Board of India.

Grievance Officer

Grievance Officer (interim, until Section 8 registration completes): Madhurjya Sarmah, via the contact page or the helpline on every page. Acknowledged within 3 working days, resolved within the timelines the law prescribes.