Delete Your Arxova Account

1. Open Settings and choose Delete Account.
2. Type DELETE to confirm. If you use Face ID or fingerprint lock in Arxova, confirm with it.
3. Tap Permanently delete my account.

Deletion starts right away and runs automatically. Most deletions finish while you wait, and the app tells you when your account has been deleted. If a step does not finish on the first try, the app tells you deletion is in progress. Our servers keep retrying automatically, and you do not need to do anything else. It completes within 30 days.

The app also clears the Arxova data stored on your phone and signs you out.

Use this if you cannot sign in, no longer have the app, or chose Close my account on the screen that asks you to accept updated Terms.

Email privacy@arxova.health with the subject line Delete my Arxova account. Include:

• The email address on your Arxova account
• Optional: your display name

Please do not send medical records, passwords, or wallet recovery phrases.

How we confirm it is you. We do not delete an account until we have confirmed the request came from its owner. We write back to the email address on your account and ask you to confirm. If you signed in with a crypto wallet, we may instead ask you to sign a short message with that wallet.

What happens next. Once we have confirmed it is you, we start the same automatic deletion the app uses and end all of your sign-ins. We complete deletion requests sent by email within 30 days of receiving them.

Data stored on your phone is not reached by an email request. Use your phone’s settings to revoke Arxova’s health permissions and remove the app and any saved exports. Copies in device or cloud backups may need separate removal.

When deletion runs, whether you started it in the app or by email, we delete from Arxova’s systems:

• Your account and profile, including your email address, display name and settings
• Medical records brought in through Fasten Health, and documents and photos you uploaded
• Data from wearables and health apps
• Medications, supplements, symptoms, vitals, cycle data and other entries you made
• ARIA conversations, ARIA memory, and insights prepared for you
• Your scores, alerts, reminders and notification history
• Share links, clinic access you granted, and your Arxova Circle contacts and their replies
• Your research matching settings and your contributions to community insights
• The encryption keys and pointers we hold in active systems for your Arweave files; copies in database backups expire within 5 days
• The private reference we hold that links newer Solana audit receipts to your account; deleting it does not erase public receipts or references someone else already retained

We also contact these services automatically:

• Privy, our sign-in provider: your sign-in account is deleted.
• RevenueCat and Stripe, our billing providers: any billing record for your account is deleted. Because Arxova is free, most people have none.
• Oura, WHOOP, Withings, Polar, Strava, and Garmin (through ROOK): we ask each one to end Arxova’s access to your account there. If a service does not confirm, our team follows up.

A few services do not let us do this automatically, so our team handles these steps:

• PostHog, our product analytics service: we delete your analytics profile and its events.
• Twilio, which sends Arxova Circle messages (by SMS to phone numbers in the United States and Canada, and by WhatsApp to phone numbers in other countries): we delete the logs of Circle messages sent to your contacts about you, where we can identify them as yours. Because a phone number can belong to more than one person’s Circle, we leave a log in place rather than risk deleting someone else’s.
• Persona, an identity check service: if you ever completed an identity check, we remove it in Persona.

We complete the manual steps within 30 days of your request. If lawfully required retention or a recipient limitation prevents a particular deletion, we explain what remains and why; those limits do not remove any rights the law gives you.

Some services do not let apps end their own access or delete data for you. To finish, please do these yourself:

• Medical records connection (Fasten Health). Your permission is held by your health system’s patient portal. Where your patient portal offers a connected-apps option, use it to revoke Arxova. If it does not, contact the health system or privacy@arxova.health for help.
• Sensor Bio. Sign in to your Sensor Bio account and remove Arxova.
• Apple Health, Health Connect, and Samsung Health. These permissions live on your phone. Delete the Arxova app, or turn off Arxova’s access in your phone’s health settings.

Fasten Health and Sensor Bio do not provide a remote deletion or disconnection mechanism for Arxova, and we currently do not send them account-deletion notices or perform a manual deletion step. Contact them directly to request deletion of their copies or revoke Arxova’s access. These limits do not waive deletion rights or remove notices and cooperation required by applicable law.

Anthropic, which powers ARIA, is not sent a deletion request. Information previously sent to it, including through background AI processing, is handled under Anthropic’s retention terms in our agreement, including our Business Associate Agreement.

Some information is kept after deletion, either because it belongs to someone else or because we need it for security or legal reasons. Clinic records and backup copies can still contain identifying information. Restricted security records and permanent public metadata are described separately below.

• Records a clinic created. If a clinic cared for you through Arxova, the notes, care plans and other records it created stay with the clinic as its medical records. They are no longer linked to your Arxova account, and the clinic’s access to your Arxova data ends. Contact the clinic about those records.
• Consent records and security logs. We keep a record that a consent existed (for example, a research consent) and our security logs, with your identity removed.
• Proof of deletion. We retain a one-way fingerprint of your account identifier to track completed deletion requests. Our restore procedure uses this record to reapply deletion before a restored backup is returned to use. A fingerprint is a security reference; it is not a promise that identification is impossible.
• Ended sign-ins. We retain a one-way hashed reference derived from your account’s wallet address, together with the time and reason your sign-in sessions were ended, to keep sign-in tokens issued before deletion invalid. The original wallet address is not retained in this session-revocation record. This restricted security reference is not used for research, advertising, or analytics.
• Backups. Our daily database backups are kept for 5 days. Your data can remain in a backup until it expires.
• Files on Arweave. Encrypted copies of your files remain on Arweave, a permanent storage network that no one can erase. We remove our keys from active systems, and backup copies expire within 5 days. This cannot erase any plaintext or key copy previously obtained by another person.
• Public labels and receipts from before October 1, 2026. Files stored on Arweave before October 1, 2026 carry public, permanent labels showing a wallet address and the type of record. Audit receipts written to Solana before that date were linked to your wallet and named the type of event, such as a health alert or a device sync. These are public and cannot be removed.

Deleting your account stops future sharing through Arxova. It cannot recall copies others already have:

• Share links: anything someone downloaded or saved while the link was active.
• Research studies: if you signed a study’s consent, the study team keeps what it received under that consent and the law. Contact the study team about it.
• Arxova Circle: messages already delivered to your contacts’ phones.

We do not sell your health data.

You do not have to delete your account to remove some information. In the app you can:

• Delete documents you uploaded, and entries such as supplements and doses
• Disconnect a records connection, wearable or health app
• Revoke a share link or a clinic’s access, and remove Circle contacts
• Withdraw your AI, research, or community-insights consent in Settings

For anything else, email privacy@arxova.health.

Email privacy@arxova.health.

HealthKey Labs, LLC d/b/a Arxova, 382 NE 191st St PMB #924568, Miami, FL 33179, United States