Privacy Policy

1. Entity and Scope

Blood Warriors Foundation ("Blood Warriors," "we," "us," "our") operates the Thalassemia Dashboard, a platform for managing thalassemia-related medical test records, reports, and screening data. This Privacy Policy applies to the Thalassemia Dashboard and its users. By using the Dashboard, you accept this policy.

2. What We Collect

• Account and profile data: name, email, phone, date of birth, role.
• Health and test data: medical test results, reports, screening data.
• Consent records: what you agreed to, when, and which policy version.
• Usage and technical data: IP address, device type, and security logs.

3. How We Use Information

We use data to operate the Dashboard, coordinate reviews, provide health tracking, and produce anonymized statistics for the public dashboard. We do not sell your personal information.

4. Data Security and Encryption

Sensitive medical data may be encrypted using AES-GCM-256. Access is controlled by role-based permissions. Some fields use application-level encryption derived from your account. This is not password-only end-to-end encryption: authorized server processes and staff with appropriate roles may decrypt data to provide the service. We apply safeguards appropriate to health data and follow India's Digital Personal Data Protection Act (DPDP) where relevant.

5. Your Rights and Choices

You may access, correct, export, or delete your data from Profile. You may withdraw consent from Profile, which blocks dashboard use until you accept again. You may register a data nominee in Profile.

Consent withdrawal

1. Go to Profile and open Privacy and consent.
2. Select Withdraw consent and confirm.
3. Dashboard features stop until you accept Terms and Privacy again.

To file a privacy complaint, use Contact Us and choose Privacy complaint.

6. Data Retention

7. AI and Third-Party Processing

When you upload medical report PDFs, we may send report content to third-party AI services to extract test values and assist reviewers. Data sent may include patient name, test dates, and lab values visible on the report.

• AWS Bedrock (Anthropic Claude): Primary processor for report field extraction and staff review assistance, hosted in the AWS Mumbai region
• Anthropic: Fallback processor for report field extraction and staff review assistance
• OpenAI: Fallback processor for PDF text extraction and structured field parsing from medical reports
• Google Gemini: Fallback processor for vision-based reading of report PDF pages when other extraction is insufficient

8. Analytics

We use Plausible Analytics to understand how the site is used when you choose Accept analytics on our cookie banner.Page views, referrers, and coarse device/browser type. No advertising cookies. You may Decline analytics and still use the portal. Use Decline analytics on the cookie banner, or open Cookie and analytics preferences in the site footer to change your choice later.

9. Public Statistics

The public dashboard shows aggregated, state-level statistics only. City, district, and center names are not published in public stats.

10. Children and Guardian Consent

Portal signup is for users 18 and older. HPLC screening interest forms for minors require a parent or guardian name and consent at submission.

11. Grievance Officer

Under the DPDP Act, you may contact our Grievance Officer for privacy concerns:

• Name: Blood Warriors Foundation Grievance Officer
• Email: contact@bloodwarriors.in
• Channel: Contact Us form (Privacy complaint) or email

12. Changes to This Policy

We may update this Privacy Policy. Material changes will be announced on the Dashboard. Continued use after the effective date constitutes acceptance where permitted by law.

13. Contact

For privacy questions, use Contact Us or email contact@bloodwarriors.in.