Delete Your Account and Data

This page explains how to request deletion of your Vaulth AI account (published by Nirmoha Private Limited) and the health data held in it. You do not need to be signed in to read this page.

1. Delete your account from inside the app

This is the fastest route and completes without any manual step on our side.

1. Open Vaulth on your phone, or sign in at vaulthai.health.
2. Go to Settings → Account → Delete account.
3. Confirm when prompted. If your account has a password you will be asked to re-enter it; if you signed in with Google or Apple you will be asked to confirm explicitly. This is deliberate — the action cannot be undone.

2. Request deletion by email

If you can no longer access your account, write to our Data Protection Officer from the email address on the account:

• Email: rishi@vaulthai.health
• Attention: Data Protection Officer / Grievance Officer, Nirmoha Private Limited
• Subject line: Account deletion request

We acknowledge grievances within 24 hours. We may need to verify that you control the account before erasing it — that check protects you, since an unverified deletion request is a way to destroy someone else’s medical records.

3. What is deleted, and when

Deleting your account removes your health records — documents and their extracted text, vitals, medications and reminders, lab results, journal entries, emergency (ICE) profile, family-member records you own, sharing links you created, and your profile and login credentials.

• Active systems — within 48 hours. Purging runs across our production databases, object storage, and analytical pipelines.
• Backups — within 30 days. Copies inside encrypted backup volumes are overwritten on a retention cycle that does not exceed 30 days. They cannot be edited in place; they age out.
• Sessions — immediately. Every signed-in device is signed out and its tokens revoked. If you signed in with Apple, we also revoke Vaulth’s access to your Apple ID.

4. What is retained, and why

One thing survives deletion: an anonymised audit record that an erasure took place, kept to evidence our compliance under the DPDP Act, 2023. It records that an account was erased and when. It does not retain your health data, and it is unlinked from your user record.

5. Prefer to keep the account but stop AI processing?

Deleting is not the only lever. In Settings → Privacy you can withdraw consent for AI processing, which stops your documents being sent to our AI processor while leaving your records stored and usable. You can also export a copy of your data before deleting it.

6. Related

• Privacy Policy — §7.2 covers deletion and consent withdrawal; §11 lists our Data Protection Officer.
• Terms of Service