Data Deletion

Last updated: July 2026

Your record is yours and your clinician's. If you want it gone, you can ask us to delete it — and we will, except where the law requires us to keep specific records. This page explains exactly what we delete, how to request it, and how long it takes.

How to request deletion

You can request deletion of your account and associated data in two ways:

  • From account settings — open your account, go to the privacy or data section, and choose to delete your account.
  • Through the contact page — send us a request from the email address on your account so we can verify it's you.

We may ask you to confirm your identity before we act, to protect your health information from someone requesting deletion on your behalf without permission.

What gets deleted

When we process a deletion request, we remove or de-identify:

  • Account information — your name, email address, and login credentials.
  • Assessment data — your answers to clinical instruments (GAD-7, ISI), medical history, medications, substance use, and safety-screen responses.
  • Monitoring data — daily check-ins and any wearable vitals you connected.
  • Care records — clinician reviews, decisions, and the messages exchanged around them, subject to the medical-record retention rules below.
  • AI signal — any risk analysis, reflections, or trajectory insight generated for your record.

What we may keep — and why

Some records we are legally or clinically required to retain, even after you delete your account:

  • Medical records — where a licensed clinician has provided care, we and the clinician may be required by law to retain the clinical record for a defined period. During that period the record is locked down, access-restricted, and not used for any other purpose.
  • Order and payment records — transaction records needed to meet tax, accounting, and anti-fraud obligations. Card details are held by our payment provider, never on our servers.
  • Security and audit logs — minimal records needed to detect fraud and protect the platform.

We keep only what we must, for only as long as we must, and we de-identify the rest.

Timing

  • We acknowledge deletion requests promptly.
  • We delete or de-identify eligible data within a reasonable period — typically within 30 days — subject to the legal retention requirements above.
  • Records held under a legal retention obligation are deleted once that obligation expires.

Before you delete

Deletion is permanent and cannot be undone. If you want to keep a copy of your care history, request an export of your data first — you can do this from account settings or through the contact page.

Deleting your account also cancels any active spray subscription and stops all monitoring and check-ins.

Third-party services

We instruct the service providers we rely on to operate the platform — hosting, payments, and email — to delete your data from their systems in line with this request, except where they are bound by their own legal retention obligations.

Questions

If you have questions about deleting your data, or want to check the status of a request, reach us through the contact page. For the full picture of how we handle your data, see our Privacy Policy.