Legal · Data Rights

Data Deletion and Your Rights

Last updated: 13 October 2026 · Under the Digital Personal Data Protection Act 2023

Your rights under DPDP

The Digital Personal Data Protection Act, 2023 (DPDP Act) gives you the following rights over your personal data held by Kyros Clinic:

Right to access: request a complete copy of all personal data we hold about you.
Right to correction: request correction of inaccurate or outdated personal data.
Right to erasure: request deletion of your account and personal data, subject to legal retention requirements.
Right to grievance redressal: raise a complaint with our Data Protection Officer.

How to request data deletion

Option 1: From the Kyros app

Open the Kyros app and go to Profile.
Tap “Delete my account” (also under Privacy & consent).
Type DELETE and tap “Delete my account”, then confirm.

Your account is closed and you are signed out on every device straight away. Your personal data is deleted within 30 days.

Option 2: By email

Email dpo@kyrosclinic.com from the email address registered on your account, with the subject line "Data deletion request".

We will verify your identity and confirm receipt within 3 business days. Deletion completes within 30 days of verification.

What is deleted

Your name, email address, phone number, date of birth and city.
Your sign-in details and every signed-in session, with the IP addresses and devices recorded for them.
Your emergency contact and ABHA number.
Your personal notes, daily check-ins, reminders and the doses you logged.
The messages in your app inbox.
The details you gave when you first asked for a consultation on this website.
The health summaries the app kept on your phone. Health Connect and Apple Health are not changed; to stop Kyros reading them, remove its access there.

What is retained after deletion

The following data is retained after account deletion for the legally required retention periods:

Your medical record (consultations, prescriptions, doctors’ notes, diagnoses, care plans, vitals, and the lab reports and documents you or your care team uploaded) is kept for 7 years from the date you delete your account, then deleted. Each consultation’s date, doctor and fee are kept with the payment records.
Payment records are kept for as long as accounting and tax law require.
Consent records are kept to show what you agreed to and when.
Security audit logs are kept to protect the service and investigate misuse.

Kept records are used only for the reason they are kept. Signed prescriptions still show the name printed on them when they were issued.

Data access and correction requests

To request a copy of your data or to correct inaccurate data, email dpo@kyrosclinic.com with the subject line "Data access request" or "Data correction request". We will respond within 7 business days.

Grievance redressal

If you believe your rights under the DPDP Act have not been honoured, you may:

First, contact our DPO at dpo@kyrosclinic.com.
If not resolved within 30 days, you may escalate to the Data Protection Board of India at dpb.gov.in.