Privacy policy

Who this covers

This policy covers the Al-Aziz Donors mobile app, used by donors and by people requesting blood, and the organization console at alazizdonors.com, used by staff and volunteers of registered organizations. It applies to everyone who uses either.

What we collect

We collect only what coordination needs. Nothing on this list is sold or used for advertising.

• Account details: your phone number (the app signs you in with a one-time code sent to it), your name and your city. Console users sign in with an email address instead.
• Donor profile: blood group, date of birth, gender, weight and the date of your last donation. Eligibility and matching are calculated from these.
• Location: a GPS point when you allow it, so requests from a nearby hospital reach you first. You can decline, and matching then falls back to your city.
• A profile photo, if you choose to add one. It is optional.
• Your device’s push token, so we can send notifications to your phone, and a log of the notifications we sent you.
• Request details when you ask for blood: hospital, blood group and units needed, your relationship to the patient, a contact phone number and any notes you add. We ask you to keep patient-identifying detail to a minimum.
• Technical records needed to run the service securely: sign-in attempts, timestamps and error logs.

Why we collect it

• To match a request with donors of a compatible blood group who are eligible and nearby.
• To work out when you are next able to donate, and to avoid contacting you during your cooldown.
• To notify you about requests you may be able to help with, within the limits described below.
• To let a registered organization maintain the roster of donors it has registered.
• To keep the service secure, prevent abuse and respond to reports.

We never use your details to decide whether you may give blood. That decision belongs to the licensed blood bank or hospital that screens you on the day.

When your contact details are shared

Your phone number is the most sensitive thing we hold, so it has one rule: it is released to a requester only after you accept their request. Before that, a requester sees that a compatible donor has been contacted, not who you are. If you decline or do not respond, nothing about you is shared.

When you accept, the requester receives your name and phone number so they can arrange the donation. The request’s contact number is shared with you at the same time, so both sides can talk directly.

Requests are not published as a public feed. We do not sell, rent or trade personal details with anyone, and we do not share them with advertisers.

We share details with third parties only when the law requires it, or with the service providers that deliver our notifications (push, SMS and WhatsApp) and host our infrastructure. They process them on our instructions and for no other purpose.

Organizations and their rosters

A hospital, NGO, mosque, university society or company that registers with us receives a console. In it, staff can see and manage the donors that organization registered itself, post requests and run donation drives.

Each organization can see only its own roster. This is enforced in the database itself, not only in the screens, so one organization cannot read another’s donors. Within an organization, owners, admins and volunteers hold different permissions.

Every organization is reviewed before its console goes live. Until approval it has no access to donor data.

Notifications

We contact donors by push notification and, where you have agreed, by WhatsApp or SMS. Notifications are about requests you may be able to help with, your eligibility and your account. We do not send marketing.

To keep this from becoming a burden, a donor receives at most 3 request notifications a day and 10 a week. You can turn notifications off in the app at any time.

How long we keep it

• Account and donor profile: for as long as your account exists.
• Location: the most recent point only. Each update replaces the previous one.
• Notification logs: 12 months, so we can investigate a complaint about unwanted messages.
• Requests: kept with the organization or requester who posted them. Patient contact numbers are removed 90 days after a request closes.
• Technical and security logs: no more than 90 days.

When you delete your account, the details that identify you are removed immediately, and copies in backups are purged within 30 days. See Deleting your account below.

How we protect it

Data is encrypted in transit. Sign-in uses one-time codes, so no passwords are stored. Access by our own team is limited to what support and operations require, and is logged. No system is perfectly secure; if we learn of a breach that affects you, we will tell you.

Your rights

Whoever you are and wherever you live, you can:

• See the details we hold about you. Most of them are visible in your profile in the app.
• Correct anything that is wrong, directly in the app or by writing to us.
• Withdraw location access or notification permission at any time, in your phone’s settings or in the app.
• Pause your availability so no request reaches you, without deleting your account.
• Delete your account, as described below.
• Complain to us, and if we do not resolve it, to the data protection authority in Pakistan.

Deleting your account

In the app, open Profile, then Settings, then Delete account. If you no longer have the app, you can request deletion by email. Both routes, and exactly what gets removed, are described on our account deletion page.

Minimum age

Al-Aziz Donors is for people aged 18 and over. We do not knowingly hold details of anyone younger; if you believe we do, write to us and we will remove them.

Changes to this policy

When we change this policy in a way that matters, we update the date at the top and tell you in the app before the change takes effect.

Contact

The service is operated by Al-Aziz Donors in Pakistan. For anything about your data, write to [email protected].