Privacy notice

When you create an account: your email address and a password (stored only as a secure hash by our authentication provider), or your Google account email and name if you sign in with Google.

If you sign in with WhatsApp: your mobile number. We create a one-time sign-in code and WhatsApp sends it to that number. The code is kept encrypted and works for up to 10 minutes; after that it can’t be used and is deleted (within a day at most). You can add an email later, but you don’t have to.

When you register as a donor:

• name, mobile number, date of birth and gender;
• blood group;
• state, district and PIN codes (current and permanent);
• when you’re usually free, the date you last donated, and your own declaration that you’re fit to donate;
• a random 4-digit PIN that Vital creates for each offer you make.

When you post a request: the patient’s blood group, units needed, hospital, its location on a map, the date needed, a contact name and phone number, and any note you add.

Where we alert you from: a point on the map, from your PIN code, from your device when you tap “Use my current location”, or where you place yourself on the map. We store that point and how it was set.

When you use the app: your offers to donate and whether they were confirmed; whether your email and mobile number are verified; your WhatsApp alert choice and the WhatsApp messages we send you or receive from you; push-notification tokens for devices where you turn alerts on; and a log of key actions (such as creating or deleting a request) for security.

Your location is never tracked in the background. The “Use my location” buttons read your position once, when you tap them.

• To alert you to requests within 25 km of your point that your blood group can donate to. If you haven’t set a point, we may email you about requests in your district.
• To show a donor and a requester each other’s contact details once the donor offers on that request.
• To show a reminder of when you may be able to donate again (90 days for men, 120 for women), based on dates you enter.
• To mark a donation as completed in Vital when the requester enters the PIN for your offer.
• To check that your email address and mobile number are yours, and that each belongs to only one account.
• To run the service and look into misuse.

• Anyone: open requests (blood group, units, hospital, city, date, contact name and note). Never the contact’s phone number.
• Signed-in users within about 25 km, on “Donors near you”: your first name and last initial, blood group, PIN code, a location rounded to about 1 km, and roughly how far away you are. Never your phone, email or exact address.
• A requester whose request you offer on: your name and phone number, so they can reach you. Nobody else.
• You, when you offer on a request: that request’s contact name and phone number.
• Your public donor card: off by default. If you turn it on, anyone with the link sees your name, blood group, donor number and donation count.
• The PIN for each offer: only you. The requester types it in and our server checks it; they never see it. It works only for that offer.
• Vital administrators: account and request details, to run and protect the service.

We never sell your data or share it for advertising.

These providers process data on our behalf, only to run Vital:

• Supabase stores the database and handles sign-in.
• Vercel hosts the website.
• Our email provider sends alert, welcome and password-reset emails.
• Google, only if you choose “Continue with Google”.
• WhatsApp (Meta) delivers alerts and replies if you turn on WhatsApp alerts, receives the code you send to verify your number, and delivers your sign-in code if you choose “Continue with WhatsApp”.
• Cloudflare Turnstile checks that sign-ins and sign-ups come from a person, not a bot.
• Sentry records app errors so we can fix them, with personal details removed.
• OpenStreetMap turns PIN codes and hospital names into map positions, names the area near your point (Nominatim; we send it a position rounded to about 100 m), and serves the map images.
• Your browser’s push service (for example Google or Apple) delivers notifications you’ve turned on.

Some of these providers may store data outside India.

We ask for your consent when you register, and record when you gave it and which version of this notice it was. You can withdraw it at any time by deleting your account.

We keep your data while your account exists. When you delete your account (Profile → Delete account), we delete your profile, PIN, requests, offers and alert subscriptions. Copies in backups are removed as those backups expire.

You can:

• see and correct your details in your profile at any time;
• ask us for a summary of the data we hold about you;
• delete your account and data yourself, or ask us to;
• nominate someone to exercise these rights if you can’t;
• raise a grievance with us, and then with the Data Protection Board of India if you’re not satisfied.

Vital is only for people aged 18 and over.

Write to sachin@vitalapp.in with “Privacy” in the subject.

See also our Terms and Safety guidelines.