Request deletion
Ask to delete specific data or close your account.
Draft a requestAfiyah · Policy notice · 29 October 2026
Your data. Practical rights.
Request deletion, a readable copy or authorized sharing through a verified process. Understand the completion time, local rights and legal exceptions.
Finding your country preference…
Start a data request
Choose the request you need.
These buttons open an editable email to our privacy team. No data is deleted, exported or shared automatically. Please leave health records and identity documents out of the first message.
Request a copy
Ask for a readable copy of your own data.
Draft a requestRequest authorized sharing
Arrange a verified, limited share with a named recipient.
Draft a requestRights and withdrawal
Depending on applicable law, you may request information, access, a readable copy, correction, deletion, restriction, objection, portability or review of a consequential automated decision. You can withdraw consent for future consent-based processing without invalidating lawful earlier processing. Optional marketing and website analytics have separate choices. Necessary service, clinical or legal records may have a different lawful basis.
Make and verify a request
Email privacy@getafiyah.com with the right you wish to exercise and a safe account reference. Do not attach identity or medical documents initially. We use proportionate verification and an appropriate secure channel when needed. Acting for another person requires valid authority; family membership and organizational sponsorship alone are insufficient.
Completion time for deletion and sharing requests
We aim to acknowledge each request within two business days. We complete valid deletion, copy and authorized-sharing requests within 30 working days of receipt, or within any shorter period required by applicable law. Working days are Monday to Friday, excluding UAE public holidays. For Saudi PDPL rights requests, the limit is 30 calendar days without delay; only a permitted extension of up to a further 30 calendar days may apply, with the reasons and revised deadline notified in advance. Verification is proportionate and must not create an unauthorized extension. If a request cannot lawfully be completed, we explain the reason, retained information, available review and complaint route within the applicable deadline.
Request deletion of your data
Ask to delete specified data or close your account through privacy@getafiyah.com. We verify identity and authority, confirm scope, assess applicable retention duties and apply deletion to relevant active systems and processors. We explain any lawful hold or independently retained provider record, backup treatment and completion outcome. Account deletion and stopping subscription renewal are separate actions; we help identify both when needed. Cancellation alone does not erase data. See Data retention and deletion. and Cancellation and refunds..
Request a copy or authorize sharing
A request for your own readable copy is distinct from permission to send information to another person. For authorized sharing, confirm the named recipient, exact records or categories, purpose, one-time or ongoing scope and any expiry. We verify the requester’s authority and recipient before disclosing the minimum approved data through a suitable secure method, and record the authorization and outcome. We do not send health files in a public enquiry acknowledgement. Sharing must also satisfy applicable health and transfer rules. You can withdraw future consent-based sharing; withdrawal cannot recall an earlier lawful disclosure or override a recipient’s independent legal retention duty.
Corrections and deletion scope
Keep original reports distinct from corrected extractions or user-entered information. A provider may need to correct its original record. We apply a valid deletion request to relevant Afiyah systems and communicate it to recipients where required; it does not automatically erase an independent clinician or insurer record. Read Data retention and deletion. for exceptions, backups and timings.
UAE rights and complaint route
Where the UAE federal PDPL applies, rights include information, access, correction, erasure, restriction and other rights subject to their statutory conditions, including applicable portability and automated-processing protections. Specific health-record laws can limit erasure. You may complain to the UAE Data Office using its applicable procedures, or to the competent health authority for matters within that authority’s remit. A free-zone authority is relevant only where its separate data-protection regime actually applies. Our internal request process does not require you to waive regulatory or court rights.
Saudi rights and complaint route
Under the Saudi PDPL, applicable rights include being informed, access, a readable copy, correction, completion, updating, destruction and withdrawal of consent, subject to lawful exceptions. Requests follow the Saudi calendar-day rule above. Complaints can be submitted to SDAIA through the National Data Governance Platform. Implementing Regulation Article 37 normally allows 90 days from the incident or awareness of it; the authority may consider a later complaint where justified. You do not have to give up that route to use Afiyah’s request process.
Questions and complaints
Contact privacy@getafiyah.com for privacy, permissions, deletion or security concerns, and contact@getafiyah.com for service complaints. Include a brief description and a safe reference; do not attach health records, identity documents, passwords or card details to an initial email. We verify identity and authority before releasing or changing personal data. You may complain to the competent regulator or court without first giving up any statutory right.