Post request

1. Who we are and what this is

BloodApp ("BloodApp", "we", "us") is a mobile web app that helps people find potential blood donors quickly during an emergency, by matching a blood request against the phone contacts a user has chosen to add to the app. BloodApp is operated by [Your Name / Company Name], based in India.

2. BloodApp is not a medical service

BloodApp is a contact-matching tool only. It does not provide medical advice, verify anyone's blood group, screen donors for medical fitness, or guarantee that blood will be available when you need it. Blood donation, testing, and transfusion must always happen through a licensed hospital or blood bank, following that institution's own medical protocols.

In a medical emergency, always call 108 (ambulance) or 112 (emergency services), or go to your nearest hospital first. Do not rely on BloodApp as your only plan.

3. Who can use BloodApp

You must be at least 18 years old and able to enter a valid Indian mobile number to create an account.

4. Your account

You sign up using your mobile number and a one-time code (OTP) sent by SMS. You are responsible for keeping access to your own phone number secure, and for all activity under your account.

5. Information you provide

Your blood group, name, the contacts you choose to import, and the details of any request you post (including a patient's name, phone number, and address) are entered by you and are not verified by BloodApp. You are responsible for making sure this information is accurate, and for having the right to share another person's details (for example, a patient you are posting a request on behalf of) with BloodApp and with your contacts.

6. Acceptable use

You agree not to:

• post false, misleading, or fraudulent blood requests;
• use BloodApp to harass, spam, or contact people outside its intended emergency-matching purpose;
• attempt to access another person's account or data;
• use BloodApp for any unlawful purpose.

We may suspend or remove access for anyone who misuses the app.

7. Contacts and WhatsApp invites

When you tap "Invite," BloodApp opens WhatsApp with a pre-filled message — this happens outside BloodApp, and WhatsApp's own terms and privacy policy apply to that conversation.

8. No guarantee of outcome

BloodApp does its best to notify matching contacts, but network issues, notification settings, or a contact simply being unavailable mean we cannot guarantee anyone will see or respond to a request in time. We are not liable for any outcome — medical, financial, or otherwise — arising from use or non-use of BloodApp.

9. Limitation of liability

To the fullest extent permitted by Indian law, BloodApp and its operator are not liable for any indirect, incidental, or consequential loss arising from your use of the app, including inability to find a donor in time, inaccurate self-reported information, or issues arising from third-party services (SMS delivery, WhatsApp, hosting providers).

10. Changes to these terms

We may update these terms from time to time. Continuing to use BloodApp after a change means you accept the updated terms.

11. Governing law

These terms are governed by the laws of India, and any disputes are subject to the exclusive jurisdiction of the courts of [Your City], India.

12. Contact us

Questions about these terms? Reach us at [your-support-email@example.com].

Last updated: [Month Year]

1. Introduction

This policy explains what personal data BloodApp collects, why, and your rights over it, in line with India's Digital Personal Data Protection Act, 2023 (DPDPA). BloodApp acts as the "Data Fiduciary" for the personal data described below; you, the user, are the "Data Principal."

2. What we collect

• Phone number — verified via OTP, used to log you in and identify your account.
• Name and blood group — entered by you, shown to your matched contacts.
• Location (latitude/longitude) — only if you grant permission, used to show approximate distance on requests.
• Contacts you choose to import — name and phone number of people you explicitly add. We never access your phone's contact list without this explicit action from you, and your contact list is never shared with anyone else or made public.
• Blood request details — patient name, phone number, address, blood group needed, and location, for any request you post.
• Device notification token — if you enable notifications, so we can alert you about matching requests.

3. Why we collect it

We use this information only to operate BloodApp's core function: matching your blood requests against your own contacts' self-reported blood groups, and notifying relevant people. We do not use your data for advertising, and we do not sell your data to anyone.

4. Your consent

By checking the box next to this policy, you give free, specific, and informed consent to this collection and use, as required under the DPDPA. You can withdraw this consent at any time by deleting your account (see Section 7), though this will also mean you can no longer use BloodApp.

5. Who we share it with

• Your own contacts — a request you post is visible only to the specific people you have added as contacts (not the public, and not "contacts of contacts").
• Service providers — we use Google Firebase (Google Cloud) to host the app, store data, verify OTPs, and send notifications. Google processes this data on our behalf, and some of this processing may take place outside India as part of Google's global infrastructure.
• WhatsApp — only if you choose to tap "Invite," which hands a message over to WhatsApp; we do not share your data with WhatsApp directly.

We do not sell, rent, or otherwise trade your personal data to third parties for their own marketing purposes.

6. How long we keep it

We keep your profile data for as long as your account is active. Blood requests are kept even after they expire or close, so you and past responders can see request history; you may ask us to delete a specific request or your entire account at any time (Section 7).

7. Your rights under the DPDPA

You have the right to:

• access a copy of the personal data we hold about you;
• correct inaccurate or incomplete data;
• request erasure of your data and account, unless we're required to keep it by law;
• withdraw your consent at any time;
• nominate another individual to exercise these rights on your behalf in the event of your death or incapacity;
• lodge a grievance with us, and if unresolved, with the Data Protection Board of India.

To exercise any of these rights, contact our Grievance Officer at [your-grievance-email@example.com].

8. Security

We use industry-standard measures (encrypted connections, access-controlled databases) to protect your data, but no system is 100% secure, and we cannot guarantee absolute security.

9. Children

BloodApp is intended for users 18 and older, and we do not knowingly collect data from children.

10. Changes to this policy

We may update this policy from time to time; continuing to use BloodApp after a change means you accept the updated policy.

11. Grievance Officer

[Name], [your-grievance-email@example.com] — as required under Indian data protection law.

Last updated: [Month Year]