ACCOUNT DELETION POLICY

1. INTRODUCTION

This Account Deletion Policy ("Policy") explains how [INSERT LEGAL ENTITY NAME], a company incorporated under the Companies Act, 2013, operating under the brand "Aarog Health Records" ("Aarog", "Company", "we", "our", "us") processes requests to delete user accounts and associated Personal Data and Health Data.

This Policy forms part of Aarog's legal framework and should be read together with the:

• Privacy Policy
• Terms & Conditions
• End User License Agreement (EULA)
• Consent for Processing Health Data
• Data Retention & Data Lifecycle Policy
• Cookie Policy
• Refund Policy (where applicable)

2. PURPOSE

The objectives of this Policy are to:

• provide Users with a transparent account deletion process;
• protect user privacy;
• comply with applicable legal obligations;
• maintain platform security;
• explain what happens to data after deletion;
• clarify which information may need to be retained.

3. WHO MAY REQUEST ACCOUNT DELETION?

An account deletion request may be made by:

• the registered User;
• a parent or lawful guardian acting for a minor where permitted by law;
• a person lawfully authorized to act on behalf of the User, subject to satisfactory verification.

Aarog may request reasonable documentation before acting on requests made by representatives.

4. METHODS TO REQUEST DELETION

Users may request deletion by:

• using the in-app "Delete Account" feature (when available);
• submitting a request through the Aarog website;
• contacting Aarog through the official support or grievance channels.

For security reasons, Aarog may require identity verification before processing the request.

5. IDENTITY VERIFICATION

To protect against unauthorized deletion, Aarog may require verification of identity.

Verification may include:

• OTP verification;
• email confirmation;
• account login verification;
• additional documentation where reasonably necessary.

If identity cannot be verified, Aarog may decline or delay the deletion request until sufficient verification is provided.

6. WHAT HAPPENS AFTER A DELETION REQUEST?

Once a valid request is received and verified:

• the account may be marked for deletion;
• access to the account may be restricted or disabled;
• user sessions may be terminated;
• certain data may enter a temporary retention period where legally or operationally necessary;
• eligible data will then be permanently deleted or anonymized in accordance with the Data Retention Policy.

7. DATA THAT WILL GENERALLY BE DELETED

Subject to the exceptions described in this Policy, Aarog aims to delete or anonymize:

• account profile information;
• uploaded medical records;
• prescriptions;
• laboratory reports;
• diagnostic reports;
• health notes;
• uploaded images;
• reminders;
• preferences;
• Family Member profiles managed solely through the User's account;
• other user-generated content associated exclusively with the account.

Deletion may occur immediately or in phases depending on technical implementation.

8. DATA THAT MAY BE RETAINED

Certain information may continue to be retained after account deletion where necessary for:

• compliance with Applicable Law;
• court orders;
• law enforcement requests;
• fraud prevention;
• cybersecurity;
• dispute resolution;
• enforcement of legal rights;
• maintenance of security and audit logs;
• disaster recovery and encrypted backups for a limited period.

Such retained information will continue to be protected in accordance with Aarog's Privacy Policy.

9. BACKUPS

Encrypted backup copies may continue to exist for a limited period after account deletion.

Backup data:

• is maintained for disaster recovery and business continuity;
• is not ordinarily accessible for routine use;
• will age out or be securely overwritten according to Aarog's operational backup schedules where technically feasible.

10. FAMILY MEMBER PROFILES

Where a User manages Family Member profiles:

• deletion of the User's account may affect access to those profiles;
• if another authorized account manages the same Family Member, access may continue through that account where technically supported;
• where no lawful manager remains, the associated records may be deleted or handled in accordance with applicable law and Aarog's policies.

11. SUBSCRIPTIONS AND PAYMENTS

Deletion of an account does not automatically cancel subscriptions purchased through:

• Google Play;
• Apple App Store; or
• other payment providers.

Users remain responsible for cancelling recurring subscriptions through the relevant platform or payment provider where applicable.

Refunds, if any, are governed by Aarog's Refund Policy and any applicable marketplace policies.

12. EFFECT OF ACCOUNT DELETION

Following completion of the deletion process:

• the User will no longer be able to log in using the deleted account;
• access to associated Health Data may be permanently lost;
• certain features may no longer be available;
• deleted data generally cannot be recovered, except where retained in accordance with this Policy or required by law.

Users are encouraged to download copies of important medical records before requesting deletion.

13. WITHDRAWAL OF CONSENT

Requesting deletion generally constitutes withdrawal of consent for future processing of Personal Data based on consent.

However, withdrawal of consent does not affect:

• processing already lawfully carried out;
• information retained under legal obligations;
• information retained for legitimate purposes such as fraud prevention, security, or dispute resolution.

14. FRAUD PREVENTION

Aarog reserves the right to delay or refuse deletion where it reasonably believes that:

• fraudulent activity has occurred;
• identity cannot be verified;
• the request is unauthorized;
• deletion would interfere with an active investigation or legal process.

Any such decision will be taken in accordance with Applicable Law.

15. REACTIVATION OF ACCOUNTS

If an account has only been marked for deletion and the deletion process has not been completed, Aarog may, at its discretion, permit reactivation following successful identity verification.

Once deletion has been completed and the associated data has been permanently deleted or irreversibly anonymized, reactivation may no longer be possible.

16. CHANGES TO THIS POLICY

Aarog may amend this Policy to reflect:

• changes in Applicable Law;
• technological developments;
• security enhancements;
• operational requirements; or
• new Services.

Material changes will be communicated where required.

17. CONTACT INFORMATION

Questions regarding this Policy may be directed to Aarog through the official support channels.

Grievance Officer

• Name: Arpan Gupta
• Email: support@aaroghealthrecords.com
• Registered Office: 206, Millenium Garden, Peer Muchalla, Zirakpur, Punjab

18. USER ACKNOWLEDGEMENT

By requesting deletion of your account, you acknowledge that:

• You have read and understood this Account Deletion Policy.
• You understand that deletion may permanently remove access to your Health Data.
• You understand that certain information may continue to be retained where required by law or for legitimate purposes such as fraud prevention, security, disaster recovery, or dispute resolution.
• You understand that you should download copies of important medical records before submitting a deletion request.
• You understand that deleting your Aarog account does not automatically cancel subscriptions purchased through third-party app marketplaces.