Data & Account Deletion Policy

Last Updated: August 12, 2026 Version 2.2

In plain terms: You can delete your HAVYT account yourself, in the app, at any time. Deletion is real: your health logs, photos, chat history, tokens and account record are permanently erased across our entire database and storage — not just hidden. A small set of records we are legally required or entitled to keep (proof that you accepted our terms, tax records, a security audit trail) is retained, and anything that would break shared data for others is anonymized instead of deleted. Copies in encrypted backups disappear within the backup cycle. There is also a softer option — resetting your onboarding — that keeps your history.

Who Is Responsible
Two Options: Delete Everything, or Just Start Over
What "Delete Account" Deletes
What Is Retained After Deletion — and Why
Backups
What Deletion Cannot Do
Timing
Deletion Without App Access
Your Other Rights
Changes to This Policy
Contact

1. Who Is Responsible

Data controller for the HAVYT service:

Daniel Denis Golaszewski (operating as "HAVYT"), self-employed professional (autónomo) established in Spain.
NIF: Z3964150J · VAT/NIF-IVA (ROI): ESZ3964150J
Address: Avinguda d'Alexandre Rosselló 15, 6 D, 07002 Palma de Mallorca, Illes Balears, Spain.
Email: support@havyt.app

This policy supplements our Privacy Policy (which describes all processing, legal bases and your other GDPR rights) and the Terms & Conditions.

2. Two Options: Delete Everything, or Just Start Over

2.1 Delete Account (destructive). Permanently erases your account and your data (Section 3). This is the option that satisfies your GDPR Article 17 right to erasure.

2.2 Restart Onboarding (non-destructive). A separate in-app reset that clears your profile setup, goals, preferences and plan so you can set HAVYT up again from scratch — your history (workouts, check-ins, symptom logs, photos) is kept. Use this if you want a fresh start, not a departure. Nothing in this option deletes data.

Both are available in the app: Settings → Account.

3. What "Delete Account" Deletes

3.1 How it works. Deletion requires re-authentication (you must confirm your password) so nobody can wipe your account from an unlocked phone. It then runs a catalog-driven hard-delete server-side, followed by an automated verification step that checks no user rows remain.

3.2 What is erased — everything, including:

your account and sign-in record (email, password hash, profile, avatar);
all health and wellness data: daily check-ins, AS symptom logs, BASDAI entries, pain logs, cycle and women's-health data, illness episodes, medication and supplement logs, food and water/alcohol logs, body metrics;
all training data: workouts, sessions, plans, GPS routes and activity logs;
all wearable data: imported samples and metrics, and your wearable OAuth connection tokens (see 3.4);
all AI coaching data: chat conversations, voice transcripts, coach notes and memory, generated insights, patterns, baselines and readiness/flare states;
all photos: progress photos, meal photos, stories and your avatar — deleted from our storage buckets, not just unlinked;
social data: friendships, shared goals/streaks, challenge participation, stories, blocks;
notifications, reminders, push tokens, preferences, gamification data (XP, streaks, achievements);
analytics events tied to your account.

The deletion catalog covers all user tables in our database (currently about 200) and all storage buckets, and is maintained so that new features are automatically included.

3.3 Cycle and pregnancy-related data is included in the hard delete like all other health data — we specifically confirm that menstrual-cycle and pregnancy/postpartum logs are permanently erased and are never retained in any identifiable form after deletion.

3.4 Wearable connections. HAVYT no longer offers a direct Oura, WHOOP or Huawei Health connection. If you made one in an earlier version, deletion removes any access token we still hold, which cuts off our access. We recommend you also revoke HAVYT's access inside the provider's own app or account settings (and in iOS Settings → Health → Data Access & Devices for Apple Health) — that revocation happens on their side and only you can do it.

4. What Is Retained After Deletion — and Why

We keep the minimum set of records that the law requires or that a legitimate, documented interest justifies (GDPR Art. 17(3)):

What	Why	How long
Legal-acceptance records (which document versions you accepted, when, how — no health data)	Proof of consent/acceptance — defense of legal claims (Art. 17(3)(e))	For the applicable statutory limitation periods under Spanish law
Admin audit log (a record that a deletion was requested and executed, and security-relevant admin actions)	Security, accountability, proof of erasure	For the applicable statutory limitation periods under Spanish law
Tax and billing records (AI-credit purchase/revenue events; Apple holds the actual payment records)	Legal obligation — Spanish tax and commercial retention	The statutory retention periods under Spanish tax and commercial law
Anonymized references — your invite codes are dissociated, your contributions to the shared food database (e.g. products you added) are kept with authorship nulled, support email thread subjects may be kept with your identifiers removed	Keeping shared/aggregate systems consistent without identifying you	Indefinite (no longer personal data once anonymized)

Nothing in the retained set includes your health logs, photos, chat content or metrics.

5. Backups

Deleted data may persist for a limited time in encrypted backups used for disaster recovery. Backups are not accessible for normal operations and are purged on a rolling basis; deleted data disappears from all backups normally within 30 days. If we ever had to restore from a backup, we would re-apply deletions recorded in the audit log.

6. What Deletion Cannot Do

Be aware of the limits — deletion removes data from our systems:

Data you already exported or shared (a Doctor Report you printed or sent, screenshots, stories others may have captured, data you gave to third parties) cannot be recalled by us.
Apple keeps its own billing and App Store records under its own privacy policy; request deletion from Apple separately if desired. HAVYT's current AI-credit packs are consumable one-time purchases, not subscriptions. Deleting your HAVYT account removes the account-linked credit balance; see the AI Credits, Billing & Refund Policy.
Apple Health and your device's own app keep the source data in their systems under their own policies; we only delete our copy and any access token we still hold (see 3.4).
Third-party processors acting for us (see the Privacy Policy processor list) delete or return personal data in accordance with their data-processing agreements; they do not retain your content beyond their contractual retention windows.

7. Timing

In-app deletion takes effect immediately for your live data (the account stops existing the moment the deletion completes).
Backup copies: purged on a rolling basis, normally within 30 days (Section 5).
Retained records (Section 4) follow their stated statutory periods.

8. Deletion Without App Access

If you can't use the in-app flow (lost device, can't sign in), email support@havyt.app from your registered address, or provide enough information for us to verify you are the account holder. We will verify identity, then perform the same deletion, and confirm to you when it is done — at the latest within one month (GDPR Art. 12(3)).

9. Your Other Rights

Deletion is one of several GDPR rights (access, rectification, restriction, portability, objection, withdrawal of consent). These, and your right to complain to the Agencia Española de Protección de Datos (AEPD, www.aepd.es) or your local supervisory authority, are described in our Privacy Policy.

10. Changes to This Policy

We may update this policy as the product or the law changes. Material changes are notified in-app and versioned through our legal-acceptance system (see the Terms & Conditions, Section 4).

11. Contact

HAVYT — Daniel Denis Golaszewski (autónomo, Spain)
NIF: Z3964150J · VAT/NIF-IVA (ROI): ESZ3964150J
Address: Avinguda d'Alexandre Rosselló 15, 6 D, 07002 Palma de Mallorca, Illes Balears, Spain.
Email: support@havyt.app

Table of Contents