1. Introduction

Welcome to BloodMap ("we," "our," or "us"). BloodMap is a life-saving mobile application that connects blood donors with recipients through real-time location-based matching. We understand the sensitive nature of health-related information and are committed to maintaining the highest standards of privacy and security.

2. Information We Collect

2.1 Information You Provide to Us

When you register and use BloodMap, we collect the following information:

• Personal Information:
  • Full name
  • Phone number (verified)
  • Date of birth (to verify you are 18 years or older)
  • Blood group (self-declared)
  • Weight (for donation eligibility)
  • Emergency contact information
• Profile Information:
  • Last donation date
  • Availability status
  • Preferred contact method
  • Profile photo (optional)
• Communication Data:
  • Messages sent through our in-app chat system
  • Emergency alert details (patient name, hospital, urgency level)
  • Feedback and support communications

2.2 Information Collected Automatically

• Location Information: With your explicit consent, we collect your device's precise GPS location to:
  • Show you nearby blood donors or recipients
  • Send emergency alerts to donors in your area
  • Calculate distance for matching purposes
• Device Information:
  • Device type and operating system
  • Unique device identifiers
  • Mobile network information
  • App version and usage statistics
• Usage Data:
  • App features accessed
  • Time spent on different screens
  • Response times to alerts
  • Donation and request history

3. How We Use Your Information

3.1 Primary Purposes

• Emergency Matching: To connect blood donors with recipients based on blood type compatibility and proximity
• Alert System: To send real-time notifications about urgent blood requirements
• Communication: To enable direct messaging between donors and recipients
• Account Management: To create and maintain your user account
• Verification: To verify your phone number and ensure account authenticity

3.2 Secondary Purposes

• Safety and Trust: To maintain platform integrity and prevent fraud or misuse
• Analytics: To understand app usage patterns and improve our services
• Gamification: To track donation history, achievements, and progress
• Customer Support: To respond to your inquiries and provide assistance
• Legal Compliance: To comply with applicable laws and regulations

4. Location Privacy Protection

5. Information Sharing and Disclosure

5.1 What We Share with Other Users

When you use BloodMap, other users can see:

• Your first name and last initial (e.g., "John D.")
• Your blood group
• Approximate area location (2-5 km radius)
• Availability status (online, offline, busy)
• General area name (e.g., "Dhanmondi Area")
• Response time rating (Fast, Moderate, Slow)
• Trust score (when available)
• Last active status (online, 1 hour ago, etc.)

5.2 What We NEVER Share

• Your full name (until you initiate chat)
• Your phone number (until both parties consent)
• Your exact address or GPS coordinates
• Building or street-level location
• Personal medical history
• Your exact age (we only show "Adult")

5.3 Third-Party Service Providers

We may share your information with trusted third-party service providers who assist us in operating our app:

• Supabase: Database hosting and authentication services
• Google Maps/OpenStreetMap: Map services and location display
• Firebase Cloud Messaging: Push notification delivery
• Analytics Providers: App performance and usage analytics

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

5.4 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including to:

• Comply with legal obligations
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing
• Protect the personal safety of users or the public

6. Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS protocols
• Secure Storage: Personal information is stored in secure, encrypted databases
• Access Controls: Strict access controls limit who can view your information
• Regular Audits: We conduct regular security audits and updates
• Authentication: Phone number verification and secure authentication systems

7. Your Rights and Choices

7.1 Access and Control

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Export: Download your data in a portable format
• Opt-out: Disable notifications or location services

7.2 Location Services

You can control location permissions through your device settings:

• Disable location services entirely
• Choose "While Using App" or "Always" permissions
• Revoke location access at any time

Note: Disabling location services will limit your ability to use core features like emergency alerts and donor matching.

7.3 Communication Preferences

You can manage your notification preferences in the app settings:

• Emergency alerts (recommended to keep enabled)
• Chat messages
• Donation reminders
• Promotional notifications

7.4 Account Deletion

You can delete your account at any time through the app settings. Upon deletion:

• Your profile will be immediately removed from the map
• Your personal information will be deleted within 30 days
• Some anonymized data may be retained for analytics
• Donation history may be retained for medical record purposes

8. Children's Privacy

BloodMap is NOT intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information.

9. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

• Active Accounts: Data retained while your account is active
• Deleted Accounts: Personal data deleted within 30 days of account deletion
• Donation Records: May be retained longer for medical and legal purposes
• Legal Requirements: Some data may be retained to comply with legal obligations

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

11. Medical Disclaimer

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:

• Posting the new Privacy Policy in the app
• Sending you a push notification
• Displaying a prominent notice in the app

Your continued use of BloodMap after changes are posted constitutes acceptance of the updated Privacy Policy.

13. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data based on:

• Consent: You have given explicit consent for specific purposes
• Contract: Processing is necessary to provide our services
• Legal Obligation: We must comply with legal requirements
• Legitimate Interests: Processing is necessary for our legitimate interests (e.g., fraud prevention)

14. Your California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how it is used
• Right to request deletion of your personal information
• Right to opt-out of the sale of personal information (we do NOT sell your data)
• Right to non-discrimination for exercising your privacy rights

16. Consent and Acceptance

By downloading, installing, or using the BloodMap application, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with any part of this Privacy Policy, please do not use our services.