Data Deletion Request

Last updated: July 10, 2026

Your Right to Delete Your Data

You may permanently delete your IPMN Compass account and all data associated with it at any time, for any reason, at no cost. This page describes what gets deleted, how to do it, and how long it takes.

What Gets Deleted

Deleting your account removes:

• Your cloud records — your visit records (cyst details you entered, visit dates, notes, symptoms, AI-generated visit summaries, and your answers about what matters to you), your consent and acceptance timestamps, and, for clinician accounts, the patient panel and its saved assessments.
• Your account — the account itself (anonymous or signed-in) is deleted from our authentication system.
• Data on your device — everything the App stored locally on the device you deleted from, including care-team contacts, preferences, onboarding state, and (for clinicians) the locally kept patient names and notes, is wiped.

The cloud deletion happens first and must succeed before the device is wiped — if anything goes wrong on the server, nothing is removed and you can try again. Deletion cannot be undone; the next time you open the App you would start fresh.

How to Delete — In the App (fastest)

The App offers deletion in two equivalent places. Use whichever you find first:

1. Account screen: open the App, go to the Account screen, scroll to the bottom, and tap Delete account & all data. Confirm the deletion.
2. Patient Settings: open Settings, find the Your data section, and tap Delete all of my data. Confirm the deletion.

Either path removes your cloud records, deletes your account, and clears the App's data from your device. It takes effect immediately.

How to Delete — By Email

If you can no longer access the App, email TBD-SUPPORT-EMAIL with the subject line "Data Deletion Request" and include:

• The email address associated with your account, if you created one
• The approximate date you first started using the App
• Any other information that can help us identify your account

We will process email requests within 30 days and confirm completion by reply. Note that if you only ever used the App anonymously (without creating an account), we may not be able to locate your account from an email description — the in-app deletion path is the reliable one for anonymous use.

What May Be Retained

• Crash reports. Anonymized crash and error reports already sent to Sentry do not contain your name, your stored visit details, or other information that identifies you, and cannot be linked back to you.
• Encrypted backups. Our database keeps standard operational backups for disaster recovery. Deleted data may persist in encrypted backup storage for a limited period before being automatically purged; during that window it is not accessible through the App or to other users.
• A minimal deletion record. A small internal record that a deletion was carried out may be kept for audit purposes.