1. Overview and Purpose

DMC Blood Group List ("we", "our", or "the app") is a voluntary, humanitarian blood donor directory and coordination platform designed for students, doctors, and alumni of Dhaka Medical College (DMC) to facilitate life-saving blood donations for patients at Dhaka Medical College Hospital and across Bangladesh.

We are firmly committed to safeguarding your privacy and protecting personal data. This Privacy Policy details what information we collect, how it is used, how it is safeguarded, and your choices regarding your data.

2. Information We Collect

To provide donor directory and emergency matching functionality, we collect the following information when you register or use the service:

• Personal Identification Details: Full Name, Email Address, and Dhaka Medical College Academic Details (Batch number and Roll).
• Health and Medical Data: ABO & Rh Blood Group (e.g., A+, B+, O+, AB+, A-, B-, O-, AB-) and donation history records.
• Contact Details: Mobile Phone Number(s) and optional WhatsApp contact number to allow verified medical personnel or emergency attendants to reach available donors.
• Geographic Location: District (residence or current posting district) to filter nearest donors during local emergencies.
• Device and App Telemetry: Firebase Cloud Messaging (FCM) push token to deliver urgent blood alerts, and device security attestation tokens via Google Play Integrity API to prevent unauthorized tampering.

3. How We Use Your Information

Your data is used solely for humanitarian blood donation coordination:

• Displaying your blood group, batch, and availability status to verified DMC community members seeking matching donors.
• Sending critical push notifications when an emergency blood request matching your blood group or batch is published.
• Tracking donation eligibility intervals (standard 90-day cooldown after each whole blood donation) to protect donor health.
• Authenticating donor accounts securely and preventing spam or impersonation through community verification.

4. Zero Third-Party Sale or Advertising

We believe deeply in ethical stewardship of donor information:

• We DO NOT sell, rent, lease, or monetize your personal information to third parties, data brokers, or marketing networks.
• We DO NOT display third-party tracking advertisements or commercial marketing cookies.
• Data is shared only with verified platform users when seeking donors in urgent medical need.

5. Data Security and Storage

We implement stringent technical and organizational security controls:

• Encryption in Transit: All communications between your device and our servers are encrypted using modern HTTPS (TLS/SSL).
• Password Protection: Passwords are cryptographic hashes stored using Argon2id with unique salts; plaintext passwords are never stored or logged.
• Device Integrity: We utilize Google Play Integrity to verify that requests originate from legitimate, uncompromised Android devices.

6. User Rights, Privacy Controls & Account Deletion

You maintain full control over your personal data at all times:

• Toggle Availability: You can mark your status as "Unavailable" at any time from your profile to stop receiving donation inquiries.
• Edit Profile: Update phone numbers, email, or district directly in your profile settings.
• Account and Data Deletion: You may request permanent deletion of your account, contact details, and records at any time by emailing our Data Administrator at [email protected] or via the in-app support channel. Upon request, all personal identifiers will be permanently expunged within 48 hours.

7. Permissions Used in the Android App

• POST_NOTIFICATIONS (Android 13+): Used solely to alert you of urgent blood requests. This permission is completely optional and non-blocking; you can use the app without enabling notifications.
• INTERNET & ACCESS_NETWORK_STATE: Used to connect to the DMC Blood directory and verify network status.