Privacy Policy

Welcome to the Progressive Blood Donors Association (PBDA) application. We connect voluntary blood donors with hospitals and recipients in real-time, focusing on absolute speed and safety.

This Privacy Policy details how we collect, verify, store, and utilize your personal and health-related data. It applies to all registered blood donors, recipients, administrators, and visitors to our website ([pbdaindia.org](https://pbdaindia.org)) and Progressive Web Application (PWA).

By registering with PBDA, you explicitly consent to the collection and processing of your data as outlined in this policy.

To run a secure and life-saving donation network, we collect several categories of information:

We process your personal and medical data for the following specific purposes:

• Geo-Matching: To identify nearby voluntary donors whose blood type matches compatible recipients or hospital emergencies in real-time.
• Real-Time Alerts: Sending instant notifications, SMS messages, and WhatsApp notifications when a critical blood shortage matches your location.
• Identity Verification: Verifying Aadhaar cards and blood test certificates through PBDA administrative moderators to protect against spam or fraudulent requests.
• Auditing: Maintaining a secure ledger of emergency responses to verify donations and track system integrity.

Your trust is paramount. **We do not sell, rent, or lease your personal or medical data to third-party advertisers, insurance companies, or commercial organizations.**

Your information is shared only under these highly restricted criteria:

• To Recipients: Only your name, blood type, and general town/city distance are visible to requesters. Your phone number is kept locked and is only revealed to a verified requester after your explicit consent or action.
• Third-Party Vendors: Cloud platforms (like Cloudinary for documents, Neon for database, and Fast2SMS for WhatsApp WABA alerts) host or process data strictly on our behalf under privacy contracts.
• Legal Requirements: We may share data with government or law enforcement agencies if required by Indian law (such as the National Blood Transfusion Council regulations or IT Act, 2000).

We employ robust administrative, technical, and physical security measures to safeguard your sensitive information:

• SSL/TLS encryption for all in-transit network traffic.
• AES-256 bit encryption at rest for database entries and verification hashes.
• Access tokens and session isolation with secure JWT credentials.
• Physical/Digital verification documents are stored securely with limited admin access.

We retain your data only for as long as your account is active or needed to coordinate blood donations.

Right to be Forgotten: You can request profile deletion at any time via the settings panel. Upon deletion, all of your personal details, physical files, medical questionnaire answers, and location logs are scrubbed from our active databases within 30 days. Stale backups are completely purged within 90 days.

We do not track you across the web or sell your browsing history. We use only essential cookies and storage keys required to run the application:

• Authentication cookies (`access_token` and `refresh_token`) to maintain your login session securely.
• Local storage states to verify PWA onboarding status and notification triggers.

According to Indian medical guidelines (National Blood Transfusion Council), individuals must be at least 18 years old to donate blood voluntarily.

Therefore, our application is strictly intended for individuals aged 18 and older. We do not knowingly collect or maintain personal data of minors. If we discover that a user under 18 has registered, we will terminate their account immediately.

You have full control over your personal and medical information:

• Access & Edit: You can view and edit your profile parameters, location preferences, and contact methods at any time.
• Revoke Consent: You can disable location tracking via browser/OS settings or opt-out of emergency notifications at any time.
• Verification Review: You can request details of any audit actions or verification rejections directly from our support channels.

PBDA reserves the right to modify this Privacy Policy. If we make material modifications (such as changing how phone numbers are shared), we will notify you through app notifications, SMS alerts, or banner notifications on our main landing page.

We encourage you to review this page periodically to remain informed about our safety protocols.

For any questions regarding this Privacy Policy, your account data, or to file a privacy grievance, please reach out to our team: