Draft for legal review, not yet in force.

Delete your Astitva for Practitioners account

Astitva for Practitioners, a product of Velcro Ventures OPC Private Limited
Last updated: [date of publication]

You can delete your Astitva for Practitioners account, and the data that goes with it, at any time. You do not need the app to ask.

This page is for practitioners. The people who use the Astitva app have their own page. If you also use this account in the Astitva app, it is the same account: deleting it in either app deletes it in both.

In the app

You can delete your Astitva for Practitioners account in the app whatever stage you are at: while you fill in your application, while we review it, if we sent it back or did not accept it, once you are verified, and while your account is paused.

1. Open Astitva for Practitioners and find Delete my account. If you are verified, it is in the You tab, under Your account. Otherwise it is at the bottom of the screen the app opens on, under Sign out. While you are filling in your application, that screen is its first one, "What kind of practitioner are you?".
2. Tap Delete my account.
3. Read what is deleted and what is kept, type your password, and tap Delete my account.

Your account is deleted straight away. The app erases what it kept on your phone for your account, signs you out and says the account is deleted.

If you forgot your password, sign out first, then tap Forgot your password? on the sign-in screen: we send a 6-digit code to your email address.

The app asks you to wait while sessions booked with you have not happened yet, while a concern about one of your sessions is still open, or while some of your earnings have not been paid out. Finish or cancel your sessions in the Sessions tab, or wait until their time is over. Then wait until the Earnings tab shows every session as paid. A session a patient cancelled late counts until its time is over, because you are still paid for it. We decide a concern within a day. While your account is paused, the app shows a note in place of your sessions and earnings, so you cannot cancel a session there: wait until its time is over and it is paid. [for the lawyer: a pause leaves booked sessions in place, and a paused practitioner cannot cancel them herself. Decide what a pause should do to them.]

Without the app

Write to [contact email] from the email address you signed up with, with "Delete my account" in the subject. We reply to that address to check the request is yours, and delete the account within [proposed: 7 days] of your reply. We write again when it is done. The same waits apply: we tell you if a session, a concern or your earnings have to be settled first.

If you no longer have that email address, write from any address and tell us. We will work out with you how to show the account is yours before we delete anything.

A request by email cannot reach your phone. To remove what the app keeps there, uninstall the app, or clear its storage in your phone's settings.

What is deleted

Deleted straight away: your account (you can no longer sign in, and your password is deleted), your application, your documents, your photograph, your hours, the words on your profile, your bank details (your account number, the IFSC and the name on the account), your notifications, and what the app kept on your phone. Patients can no longer find you or book you.

What we keep, and why

Some records must be kept by law, even after an account is deleted. They are locked away, only the people who run Astitva can open them, they are used only if the law requires it or to pay you money we owe you, and they are deleted when their time is up.

• A record that the account existed: your email address and your application. Kept for 180 days, because India's IT Rules 2021 require it.
• If a session was ever booked with you, even one that was cancelled or never paid for: the payment and payout records of your sessions, and when each side joined and left each video call, with your name, qualification and registration and your PAN. The record of each payout keeps its amount, the day, our bank's reference, and the last four digits, IFSC and name of the account it was paid into. Kept until 8 years after the end of the financial year of the last payment on them, or of the session's own date when nothing was paid, because company and tax law require it. Our records of your sessions keep your name, qualification and registration. If no session was ever booked with you, your PAN is deleted straight away.
• Emails and complaints you sent us: kept for [proposed: 3 years after the last message].
• Sign-in records: each time the account was made, signed in, had its password reset or was deleted, with the email address and the internet address (IP address) it came from. Kept for 180 days, because India's CERT-In directions ask for logs to be kept that long, then erased.
• Technical logs: kept for [proposed: 1 year].
• Backups: copies of our database are replaced after [backup period, per our Supabase plan]. Your data leaves them when that period ends.

If a payout we sent comes back from your bank after you delete your account, we write to you at your email address to pay you another way. [for the lawyer: this uses the email address kept in the 180-day record, and nothing else of it. After 180 days we no longer have it. Say whether this use is allowed, and what we must do with money we cannot pay.]

Questions

Write to [contact email]. Our grievance officer is [grievance officer's name], at [grievance email].