Privacy Policy

Last updated: 18 July 2026 · Governing law: Haryana, India

SwiftAid ("we") is a community ambulance-coordination platform in Yamuna Nagar, Haryana. This policy explains what data we collect, why we need it, and how it is used. By using the Platform you consent to this policy, the Digital Personal Data Protection Act, 2023 (DPDPA) framework, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

1. Data we collect

• Emergency request data: incident type, GPS location, flat/house number, landmark, phone number, whether you are the patient, timestamps.
• Optional patient profile: blood type, medical conditions, allergies, emergency contacts.
• Account data (crew, hospital, admin): email, password hash (via Supabase Auth), submission metadata.
• Crew data: name, phone, EMT certification expiry, ambulance callsign, ambulance type, base hospital.
• Hospital data: name, address, contact number, capabilities, bed and ICU availability.
• Live operational data: ambulance GPS pings, dispatch decisions, ETAs, incident status transitions.
• Device/technical data: browser type, IP address, and standard server logs, retained for security and abuse prevention.

2. Why we collect it (purpose limitation)

• To route the closest ambulance and identify the best receiving hospital.
• To let the crew locate and treat the patient.
• To let hospitals prepare for incoming patients.
• To let admins verify crew/hospital identity and manage the fleet.
• To secure the Platform against abuse and false alarms.
• To comply with law and to respond to lawful requests from police, courts and regulators.

3. Who your data is shared with

• Dispatched crew receive your location, phone, incident type and, if provided, medical profile.
• Receiving hospital receives incident type, ETA, ambulance ID and (if provided) medical profile.
• SwiftAid admins can view all operational data.
• Third-party processors: Google Maps Platform (geocoding, routing), Supabase (database, auth, realtime), Lovable (hosting and AI Gateway), AI model providers (routing decisions). These providers process data on our behalf under their own security terms.
• Law-enforcement or government authority, when required by a valid legal order.
• We do not sell your personal data. We do not use it for advertising.

4. Retention

• Incident records: retained for up to 3 years for audit/dispute/legal purposes, then deleted or anonymised. Admins may clear closed/cancelled incident history earlier.
• Live GPS pings: retained for the duration of the active run and up to 30 days afterwards.
• Account data: retained while the account is active, and up to 6 months after deletion.
• Legal-hold records may be retained longer as required by law.

5. Security

We use industry-standard measures — TLS in transit, database-level Row Level Security, hashed passwords via Supabase Auth, and role-based access controls. No system is perfectly secure; you use the Platform at your own risk (see Terms §6–7).

6. Your rights

Under the DPDPA and applicable law you may request to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Erase personal data (subject to legal retention, ongoing incident, or audit requirements).
• Withdraw consent — note this may make emergency dispatch impossible.
• Nominate another individual to exercise your rights on your behalf in case of death or incapacity.

Send requests to aayaansardana@gmail.com. We will respond within a reasonable time.

You can delete your SwiftAid account at any time, in the app or on the web, at swiftaidyamunanagar.lovable.app/delete-account.

7. Children

The Platform is not intended for use by children under 18 without a parent/guardian. Requests on behalf of children in an emergency are permitted — the requester acts as the responsible adult.

8. Cross-border transfers

Some processors (Google, Lovable, Supabase, AI providers) may process data outside India on servers governed by their own data-protection frameworks. By using SwiftAid you consent to such transfers as necessary for the service to operate.

9. Changes to this policy

We may update this policy at any time. Continued use after an update constitutes acceptance.

10. Grievance Officer

Grievance Officer: Aayaan Sardana. Email: aayaansardana@gmail.com. Location: Yamuna Nagar, Haryana, India.