Effective 26 November 2026
Data Retention Policy
We keep personal data only as long as needed for the purpose it was collected, or as required by law.
Retention schedule
| Data type | Retention | Basis |
|---|---|---|
| Account profile (name, email, phone) | While account is active + 30 days after deletion | Contract, security |
| Chat transcripts | While account is active. 90 days after account deletion, then purged. | Consent |
| Uploaded medical documents (Vault) | While account is active. Permanently deleted within 30 days of account deletion. | Consent |
| Family member profiles | Same as account | Consent |
| Consent logs | 7 years | DPDPA §8(4) audit trail |
| Payment / invoice records | 8 years | Companies Act §128, GST Act |
| Login history & security events | 1 year | Security, fraud prevention |
| Anonymised analytics | 36 months | Legitimate interest (aggregate) |
| Sentry crash reports (no PII) | 90 days | Security, debugging |
| Rate-limit counters | 1 hour rolling | Abuse prevention |
Deletion
Account deletion is available at Account → Privacy → Delete account. The request is honoured immediately for user-visible surfaces; backups are rotated out within 35 days. You will receive a confirmation email.
Export
You can download a JSON export of your data at Account → Privacy → Export data at any time.
Legal holds
If we receive a valid legal order, we may retain specific records beyond the periods above solely for the duration of the hold.
Nevika Innovations Private Limited
Infrastructure for the Future
CIN: U62090MH2026OPC472128 · GSTIN: 27AALCN7118G1Z9
1st Floor, Mapkhan Nagar, Opp. Municipal School, Marol, Marol Naka, Andheri (East), Mumbai – 400059, Maharashtra, India
https://www.nevika.co · info@nevika.co · +91 82919 98800