Circadify

Deletion

How data is deleted and how to handle deletion requests.

Circadify's architecture means there is no health data to delete on our side — we don't retain vital sign results or measurement payloads. Deletion handling therefore reduces to developer account data and audit log records.

Per-Scan Data

Vital sign results are returned in the API response and are not stored on our side. The measurement payload is processed and discarded. There is no per-scan health data to delete because nothing health-related is retained.

The single artifact retained per scan is a usage record (one scan credit consumed). It contains no health data and is kept for billing and quota.

Note

If your application stores vital sign results for users (in your own database), deletion of those records is governed by your own data-handling policy — Circadify does not have a copy.

Developer Account Data

Developer accounts (email, name, company, API keys, usage records) are persistent and retained for the duration of the contract.

To request account closure or deletion of developer account data, contact support@circadify.com. Upon account closure:

  • The developer account is deactivated
  • All associated API keys are revoked
  • Usage records may be retained as required for billing and compliance

Data Subject Requests (GDPR / CCPA)

For data subject access or deletion requests:

  1. Contact support@circadify.com with the request details.
  2. Our team will identify any data associated with the data subject. Because vital sign results and measurement payloads are not stored on our side, there is typically no health data to retrieve or delete.
  3. Developer account data and audit log references will be handled per the request and applicable retention requirements.
Caution

Audit logs are retained for compliance purposes (HIPAA) and may not be eligible for deletion. Audit records contain account-administration events and never contain health data.

Audit Logs

Audit logs are retained for a minimum of 6 years per HIPAA requirements. They record account-administration events (actor, action, resource, outcome, timestamp) but do not contain health data, vital sign results, or measurement payloads. Audit log deletion requests should be directed to support@circadify.com and will be evaluated on a case-by-case basis.

Next Steps