Deleting your account & data

You can permanently delete your XyberHealth account — and the personal data we hold about you on our servers — at any time, directly and without contacting us. This page explains how, exactly what is erased, and the limited records we are legally required to retain.

How to delete your account

• In the app / on the web: sign in, then go to your account → Privacy & consent → Delete my account, or go straight to xyber.health/account/delete.
• You will be asked to type DELETE to confirm. The deletion is immediate and permanent once confirmed.
• For your security, only the signed-in account holdercan delete their own account — we never act on a deletion request for someone else's account.

What is permanently erased

Confirming deletion immediately and irreversibly removes the personal data keyed to your account, including:

• Your profile: sex, age, weight, height, body-composition, goals, diet and activity.
• Your health inputs: conditions, medications, allergies, and pregnancy status.
• Saved stacks and your current stack, cart, orders/auto-ship preferences, and reminders.
• Biomarker readings, cycle logs, and your sleep, readiness and biological-age snapshots.
• Fridge / nutrition data and any AI skin/hair photo-analysis results.
• Messages, bookings, consult notes, and provider/coach relationships you are part of.
• Your consent history, notification logs, push subscriptions, and two-factor secrets.
• Your sign-in credentials and the account itself.

Where a provider or coach had a private contact record (their CRM copy) of you, your name, email and notes in that record are anonymized as part of the deletion.

What we retain — and why

A small set of records is retained only where the law requires or to operate the platform responsibly:

• Order, payment and booking records (including the reference held by our payment processor) are retained for the period required by tax, accounting and consumer- protection law. These are financial records, not your health profile.
• A minimal, non-identifying deletion record — the fact that an account was deleted, with a timestamp — is kept so we can demonstrate that your erasure request was honored. It contains no name, email, or health data.

Backups are rotated on a schedule; any residual copies in encrypted backups are overwritten in the normal backup-retention cycle.

Your rights

Deletion is one of your data-subject rights. You can also request a copy of your data. We honor these rights under the EU/UK GDPR, Canada's PIPEDA and Quebec Law 25, the UAE PDPL, the US CCPA/CPRA, and the Washington My Health My Data Act. See our Privacy policy for the full picture.

Need help?

If you can't access your account to delete it yourself, email privacy@xyber.health and we will verify your identity and action your request, in line with the statutory response windows above.