Privacy policy

Last updated: EFFECTIVE_DATE. This policy covers the Sahay app for Android and iOS (package in.sahay.blood), run by DEVELOPER_NAME (“we”).

What Sahay does

Sahay connects people who need blood with willing donors nearby. We collect only what is needed for that.

Data we collect

• Account: your name and email from Google sign-in. Used only to sign you in; never shown to other users.
• Phone number: only if you request blood. Shown only to donors who say yes to your request, so they can call you.
• Donor profile: blood group, sex (optional), last donation date, donation history and which components (whole blood, platelets, plasma) you are willing to give. Used to decide when you can safely donate and which requests you can help with.
• Approximate location: your area rounded to about 1 km, to alert you about requests nearby. We do not collect precise or background location.
• Blood requests: blood group, units, hospital, patient name, an optional note and an optional photo of the hospital requisition form.
• Optional features: patient donor groups and transfusion dates, circles you create or join, and the rare blood registry (your rare type, lab name and an optional lab report photo, visible only to our team).
• Device: a push notification token so we can send alerts.

How we use it

• To match requests with compatible, eligible donors and send alerts.
• To remind you when you can donate again (you can turn reminders off).
• To let hospital staff verify requests at their hospital.
• To keep the service safe: blocking requests that mention payment, and limiting how often a donor is alerted.

We do not sell your data, show ads, or share your data for marketing.

Who can see what

• Families never see a donor’s phone number. Donors decide whether to call.
• Donors see a request’s blood group, units, hospital, patient name and distance.
• Rare blood registry entries are never visible to families or other users; approved hospital staff see only counts.

Service providers

We use these providers to run the app. They process data only on our behalf:

• Supabase (database, sign-in and file storage)
• Google (sign-in) and Firebase Cloud Messaging / Expo (push notifications)
• OpenFreeMap (map tiles; receives your device’s IP address when a map loads)

Security and retention

Data is encrypted in transit. Access is restricted by database rules so each person can read only what they are allowed to. Requests close automatically after their expiry. We keep your data until you delete your account.

Your choices and rights

• Delete your account and data at any time: in the app, Settings → Delete my data. See also Delete your account.
• Leave the rare blood registry, patient groups or circles at any time.
• Contact us to access or correct your data.

Children

Sahay is for people aged 18 and over. Donors must confirm they are 18 to 65 years old.

Medical disclaimer

Sahay is not a blood bank and does not give medical advice. The blood bank checks every donor’s health before donation.

Contact and grievance officer

GRIEVANCE_NAME, SUPPORT_EMAIL, POSTAL_ADDRESS. We respond within 30 days.

We will post changes to this policy on this page.