Account & Data Deletion

This page explains how a ZidBit Clinic OS user can request deletion of their account and the data associated with it, what is deleted, what is retained, and for how long. It applies to the ZidBit Clinic OS mobile app and web application operated by ZidBit Technologies.

Last updated: August 18, 2026

How to request deletion

Staff accounts in ZidBit Clinic OS are managed by the clinic. How you request deletion depends on your role:

• Staff members (doctors and other staff): your account is created and removed by your clinic administrator. To have your account and profile removed, ask your clinic administrator to remove you from the clinic in ZidBit Clinic OS.
• Clinic administrators / owners: to delete your own account, or the entire clinic account and its associated data, email support@zidbit.com with the subject “Account Deletion Request” from your registered email, or use our contact page.

We verify that a request comes from an authorized account holder or clinic administrator before acting on it. Deletion of clinic-owned data follows the data lifecycle set out in our Privacy Policy — a 30-day read-only grace period after a subscription ends, soft-deletion at day 30, and permanent, irreversible deletion at day 37 — together with the legal retention requirements described below. Export your data (available as CSV) before the grace period ends.

Data that is deleted

When your account is deleted, we delete the personal data that identifies you as a user of the application, including:

• Your account and login credentials (email / sign-in identity).
• Your staff profile information — name, email address, phone number, role, and profile photo.
• Your ability to sign in: server-side authentication sessions and tokens are invalidated so the account can no longer access the application. (We do not access or modify your device.)
• Preferences and settings tied to your personal account.

Residual copies in encrypted backups are removed on our standard backup-rotation schedule. Automatically generated system logs are deleted after 90 days.

Data that is retained (and why)

ZidBit Clinic OS is used by clinics to manage patient care. Some data is owned by the clinic rather than by an individual user, and cannot be removed simply because one staff member deletes their account:

• Patient and clinical records (medical history, consultations, prescriptions, documents) belong to the clinic, which acts as their custodian. ZidBit Technologies processes this data only on the clinic’s behalf. It is retained for as long as the clinic requires and as mandated by applicable medical-record retention laws, and is deleted or returned on the clinic’s instruction or upon termination of the clinic’s agreement with us.
• Billing and financial records (invoices, receipts) may be retained for the period required by applicable tax, accounting, and audit laws.
• Audit and system logs — for security, integrity, fraud prevention, and legal compliance, we retain access (audit) logs, which may include identifiers such as user IDs, IP addresses, and timestamps, for as long as reasonably required. Automatically generated system logs are deleted after 90 days. These logs are kept on a fixed schedule, independently of account or data-deletion requests; they are not removed on request and are purged automatically when their retention period ends.
• Limited records required by law — where we are legally obliged to keep certain information, we retain only what is required, for only as long as required, after which it is deleted.

A clinic administrator (or clinic owner) can request deletion of the clinic’s account and all associated clinic and patient data by contacting us at the address above, subject to the legal retention requirements described here.

Questions

For any question about deletion or your data, email support@zidbit.com. See also our Privacy Policy.