Privacy Policy

Effective date: October 26, 2026

HemaReach (“we”, “us”) operates the HemaReach blood-donor platform: the public website at www.hemareach.com, the institution portal, the platform admin console, and the HemaReach Donor mobile application (the “App”). This Privacy Policy explains what data we collect, why we collect it, how it is stored and shared, and how you can review, correct, or delete it.

Reading this in the App? You can also reach this page from Settings → Privacy & Terms. If anything below is unclear, please email [email protected] and we will respond within 5 business days.

1. Data we collect

We only collect data that is needed to verify donors, match donation requests, and run the service safely. We never sell personal data, and we never use it for advertising.

From donors (the App)

  • Account & identity: phone number or email address, optional name, date of birth (used to confirm 18+ eligibility), gender, blood type, preferred language (English / Arabic), country and city.
  • Authentication: hashed credentials, one-time codes (OTP) sent by SMS or email, Google Sign-In token (when you choose “Continue with Google”).
  • Profile photo (optional): a single photo you upload from the App, used only on your in-App donor card. It is not shown to other donors.
  • Donation activity: last donation date, donation history, eligibility status, alert responses (Accepted / Declined / Opt-out), notification preferences.
  • Device & technical: Firebase Cloud Messaging (FCM) push token, app version, OS version, device language, anonymous crash reports and diagnostic logs.
  • Network: IP address and timestamps of authentication and API requests (kept in security/audit logs).

From institutions (web portal)

  • Organization name, country, city, contact name / phone / email.
  • License or registration document(s) uploaded during onboarding.
  • Staff identities created by the verified institution administrator.

2. How we use the data

  • Verify that donors are real, eligible, and 18 or older.
  • Notify nearby compatible donors when a verified hospital activates a request.
  • Throttle alerts to respect quiet hours, weekly caps, and minimum donation intervals.
  • Provide secure links so donors can accept or decline an alert without logging in.
  • Keep audit logs for safety, fraud prevention, and regulatory accountability.
  • Operate, debug, and improve the App and back-end services.

We do not use donor data to send marketing, and we do not run third-party advertising trackers in the App.

3. What hospitals can and cannot see

  • Hospitals can see: aggregated counts of compatible donors in their area, and per-alert response status (accepted / declined / opt-out / pending).
  • Hospitals cannot see: a donor’s name, phone number, email, address, profile photo, or full donation history. The donor decides whether to contact the hospital after accepting an alert.

4. Sharing with service providers

We use a small number of trusted processors that handle data only on our instructions:

  • Google Firebase Cloud Messaging (FCM) — delivers push notifications to the App. Receives your FCM token and the alert payload.
  • Google Sign-In — when you choose “Continue with Google”, Google provides us with your verified email address and Google account ID. We do not receive your Google password.
  • Email provider (Postmark / Amazon SES) — delivers transactional emails (verification codes, alerts, account notices).
  • SMS / WhatsApp / Voice provider (Twilio, when enabled) — delivers SMS verification codes and donation alerts to your phone number.
  • Hosting infrastructure — servers in the UAE and the EU running our application, database, and backups.

We do not sell personal data and we do not share it with advertisers, data brokers, or unrelated third parties.

5. Security & encryption

  • All traffic between the App, the website, and our servers is encrypted in transit using HTTPS / TLS 1.2+.
  • Passwords are stored as one-way salted hashes (bcrypt). Authentication tokens are rotated and can be revoked.
  • Verification codes (SMS / email OTP) expire after a short time and can only be used once.
  • Backups are encrypted and access to production systems is limited to named staff with two-factor authentication.

6. Your rights and how to delete your account

You can review, correct, export, or delete your data at any time. There are two ways to delete your account and the data associated with it:

Option A — delete from inside the App

  1. Open the HemaReach Donor App.
  2. Go to Settings (or Profile → Settings).
  3. Tap Delete account and confirm.

Once you confirm, your account is closed immediately and the deletion process described below begins.

Option B — request deletion by email

Email [email protected] from the address associated with your account, with the subject line “Account deletion request”. We will confirm receipt within 5 business days and complete the deletion within 30 days.

What gets deleted

  • Your profile (name, phone, email, blood type, country / city, language).
  • Your profile photo, if you uploaded one.
  • Your alert response history, donation dates, and notification preferences.
  • Your authentication tokens, FCM push token, and device records.

What we keep, and for how long

  • Security and audit logs (IP addresses, login timestamps, moderation/abuse signals) — kept for up to 90 days after deletion for fraud prevention and regulatory accountability, then permanently erased.
  • Aggregated, anonymous statistics (e.g. number of alerts sent in a city, average response time) — retained indefinitely. These contain no information that can identify you.
  • Records we are legally required to keep (e.g. financial / tax documents related to an institution account) — retained for the period required by applicable law.

Deletion is irreversible. If you change your mind later, you will need to create a new account.

7. Other rights

  • Access & export. Email [email protected] and we will send you a machine-readable copy of your data within 30 days.
  • Correction. You can edit your country, city, blood type, and profile photo from inside the App at any time. For other corrections, email us.
  • Withdraw consent. You can opt out of donation alerts at any time from Settings, or by replying STOP to any SMS / email alert.
  • Complain. If you believe we have mishandled your data, please contact us first. You may also contact your local data-protection authority (e.g. the UAE TDRA or the EU supervisory authority for your country of residence).

8. Children

The HemaReach Donor App is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has registered, email [email protected] and we will remove the account.

9. International transfers

HemaReach is operated from the UAE. Some of our processors (Google FCM, Google Sign-In, Postmark / SES, Twilio) operate globally and may process data outside the UAE / EU. They are bound by contractual data-protection terms and process data only on our instructions.

10. Changes to this policy

If we make material changes, we will update the Effective date above and, where appropriate, notify you in the App or by email before the change takes effect.

11. Contact

HemaReach — [email protected]
For account or data deletion: see Section 6 above.