Blood SOS Connecting donors & recipients

Privacy Policy

Last updated October 05, 2026

Devex Hub Private Limited ("we", "us", "our") – the company behind Blood SOS – operates the Blood SOS mobile application. This Privacy Notice describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our Services.

About Devex Hub Private Limited
Devex Hub Private Limited is a technology company focused on building impactful digital solutions for healthcare and emergency response. With a passion for leveraging mobile technology to save lives, we developed Blood SOS – a free, real‑time platform that connects blood donors with recipients in critical moments. Our mission is to make blood donation more accessible, reduce emergency response times, and foster a community of lifesavers.

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at Business@devexhub.com.

Table of Contents

1. What information do we collect? 2. How do we process your information? 3. When and with whom do we share? 4. How long do we keep your information? 5. How do we keep your information safe? 6. Do we collect information from minors? 7. What are your privacy rights? 8. Controls for Do-Not-Track 9. Other regions' specific rights 10. Do we make updates to this notice? 11. How can you contact us? 12. How can you review, update, or delete your data?

1. What information do we collect?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you register on the Services, express interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information we collect may include:

Sensitive Information. We collect health-related data including your blood group, donation availability, donation history, last donation date, and eligibility details. This information is used only to match donors with people who need blood.

Application Data. If you use our application, we may also collect the following information if you choose to provide us with access or permission:

All personal information you provide must be true, complete, and accurate, and you must notify us of any changes.

Information automatically collected

In Short: Some information — such as IP address and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This may include device and usage information such as IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, and how and when you use our Services.

2. How do we process your information?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

3. When and with whom do we share your personal information?

In Short: We may share information in specific situations described in this section and/or with the following third parties.

4. How long do we keep your information?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible, securely store it and isolate it from further processing until deletion is possible.

5. How do we keep your information safe?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. For example, user passwords are mathematically hashed and stored in an encrypted form, making them unreadable even to us. All personal data, location information, and communications transmitted between the mobile application and our backend servers are encrypted in transit using modern industry-standard cryptographic protocols (HTTPS / TLS 1.2+). However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. You should only access the Services within a secure environment.

6. Do we collect information from minors?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data. If you become aware of any data we may have collected from children under age 18, please contact us at Business@devexhub.com.

7. What are your privacy rights?

In Short: You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.

Withdrawing your consent: If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent by contacting us using the contact details in section 11 below.

However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

Account Information

If you would at any time like to review or change the information in your account or terminate your account, you can:

Account and Data Deletion: Users can request the deletion of their account and all associated personal data at any time by:

  1. Using the in-app option: Navigate to Settings → Delete Account within the Blood SOS app.
  2. Using our public web form: Visiting our account deactivation portal at https://bloodsos.com/api/v1/legal/deactivate.

Upon account deletion, all personal information, location history, profile data, and messages are permanently purged from our active databases in accordance with our data retention schedule.

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with investigations, enforce our legal terms and/or comply with applicable legal requirements.

If you have questions or comments about your privacy rights, you may email us at Business@devexhub.com.

8. Controls for Do-Not-Track features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.

9. Do other regions have specific privacy rights?

In Short: You may have additional rights based on the country you reside in.

India

We collect and process your personal information in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

10. Do we make updates to this notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Revised" date at the top of this Privacy Notice. If we make material changes, we may notify you by prominently posting a notice or by directly sending you a notification. We encourage you to review this Privacy Notice frequently.

11. How can you contact us about this notice?

If you have questions or comments about this notice, you may email us at Business@devexhub.com or contact us by post or phone at:

Devex Hub Private Limited (operating as Blood SOS)
Fourth Floor, D-254, GR Square, Sector-75, Industrial Area Phase 8A, Mohali, SAS Nagar, Punjab 160071
India
Phone: +91 9875905950, +91 9876549018

12. How can you review, update, or delete the data we collect from you?

You have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information.

Users can request the deletion of their account and all associated personal data at any time by:

  1. Using the in-app option: Navigate to Settings → Delete Account within the Blood SOS app.
  2. Using our public web form: Visiting our account deactivation portal at https://bloodsos.com/api/v1/legal/deactivate.

Upon account deletion, all personal information, location history, profile data, and messages are permanently purged from our active databases in accordance with our data retention schedule.