Data retention

• Data is kept while your account is active and you use the service.
• When a purpose ends, for example when you withdraw consent or delete your account, we stop processing for it. Data held only for that purpose is then erased under our retention schedule, unless the law requires us to keep it.
• Health records that the law requires to be kept are pseudonymised rather than deleted: your identifying details are replaced with a pseudonym.
• Security, sign-in and audit logs are kept for at least one year, as Rule 6 requires. Our logging is configured to keep them for 400 days; this is being rolled out with our next release.
• Nothing is erased while a legal hold or an open request about it is in place.

Deleting your account from the Privacy Centre files an erasure request. Once it is approved, your account is suspended and sign-in blocked, your stored files are removed and your details are pseudonymised. Health records the law requires us to keep stay in pseudonymised form. See your rights.

The DPDP Rules 2025 set erasure periods for some classes of platform where a person has not used the service, with 48 hours' notice before erasure. How these apply to JeevanPatra is part of the retention schedule under legal review.