Privacy Policy

DM Donation ("we", "us", or "our") operates Jordan's blood donation network. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and web application.

By creating an account or using our services, you agree to the practices described in this policy. If you do not agree, please do not use our platform.

We collect information you provide directly and data generated through your use of the platform:

• Account details: name, email address, and authentication credentials (managed securely via Supabase Auth).
• Profile information: blood type and optional phone number.
• Blood requests: patient name, contact phone, hospital, urgency, blood type needed, and optional notes.
• Donation offers: messages you send when offering to donate for a specific request.
• Usage data: basic logs needed to operate, secure, and improve the service (e.g. errors, performance).

We use your information to:

• Connect blood donors with patients and requesters across Jordan.
• Display open blood requests and compatible donation offers.
• Share contact details between matched donors and request owners when you choose to offer or fulfill a request.
• Maintain and improve platform security, reliability, and user experience.
• Communicate important service updates when necessary.

Blood request listings are visible to authenticated users so donors can find and respond to needs. When you post a request, details such as blood type, hospital, urgency, and contact phone may be shown to potential donors.

When you submit a donation offer, your profile name, blood type, email, and phone (if provided) may be visible to the person who posted the request.

We do not sell your personal information. We may share data with service providers (such as hosting and authentication providers) who process it on our behalf under contractual obligations, or when required by law.

Your data is stored on secure infrastructure provided by Supabase. We apply industry-standard measures including encrypted connections (HTTPS), access controls, and row-level security policies in our database.

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

Depending on applicable law, you may have the right to:

• Access and update your profile information through the app.
• Delete your account and associated data, subject to legal retention requirements.
• Withdraw consent for optional data (such as phone number) by updating your profile.
• Contact us to request clarification or exercise privacy rights.

We retain your account and profile data while your account is active. Blood requests and donation offers may remain in our systems for operational and safety purposes after a request is fulfilled or closed, unless deletion is requested where permitted.

We may retain limited information as required to comply with legal obligations, resolve disputes, or enforce our terms.

Our services are not directed to individuals under 16. We do not knowingly collect personal information from children. If you believe a child has provided us data, please contact us so we can remove it.

We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated "Last updated" date. Continued use of the platform after changes constitutes acceptance of the updated policy.