{"id":3371,"date":"2023-11-05T22:08:04","date_gmt":"2023-11-05T22:08:04","guid":{"rendered":"https:\/\/nightscout.pro\/?page_id=3371"},"modified":"2026-10-11T17:53:27","modified_gmt":"2026-10-11T17:53:27","slug":"data-retention-policy","status":"publish","type":"page","link":"https:\/\/nightscout.pro\/pl\/data-retention-policy\/","title":{"rendered":"Data Retention Policy"},"content":{"rendered":"

[et_pb_section fb_built=”1″ _builder_version=”4.16″ global_colors_info=”{}”][et_pb_row _builder_version=”4.16″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.22.0″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″]<\/p>\n

\n

Data Retention and Account Deletion Policy<\/h1>\n

Last updated: 11 October 2026<\/strong><\/p>\n

This policy explains how Nightscout Pro Ltd handles account closure, health data and the records we must keep. It applies to the services and copies we control. Contact support@nightscoutpro.com<\/a> with a deletion request or any question.<\/p>\n

Cancellation and permanent deletion<\/h2>\n

Cancelling a subscription stops future renewal. It is separate from permanently deleting your account and data. Closing access to an account also does not, by itself, erase its data. If your meaning is unclear, we will clarify whether you want cancellation, permanent deletion, or both.<\/p>\n

After the relevant paid service ends, ordinary cancellation allows a recovery period of two calendar months. At the end of that period, the related service data is due for permanent deletion. Where an account has more than one site or subscription, cancellation of one does not authorise deletion of the others.<\/p>\n

An explicit erasure request does not have to wait for this recovery period. We act without undue delay and normally respond within one calendar month. Where the law permits an extension because a request is complex or numerous, we will explain the reason and revised timeframe within the first month. You may expressly choose a later deletion date, for example the end of a paid period. We do not impose that delay on you.<\/p>\n

Making and scheduling a request<\/h2>\n

You can request deletion through support even if you cannot sign in. We take proportionate steps to verify your identity and authority over the account and the affected health data. Where reasonably necessary, we may ask for additional verification. An authorised parent, guardian or representative may request deletion on behalf of the person concerned; we will check their authority.<\/p>\n

Support records the request date, verification, scope and scheduled date in a deletion register. An administrator can schedule deletion, change its date or cancel the schedule before erasure starts. The request remains tracked if the support ticket is closed. Once erasure starts, removed data cannot be recovered. Ask for any export you need before the scheduled date; requesting an export does not automatically change that date.<\/p>\n

Scheduling permanent account deletion also stops subscription renewal. If you choose deletion before the paid period ends, remaining service ends when deletion starts. Refund requests are considered separately, and statutory rights are unaffected.<\/p>\n

What is erased<\/h2>\n

For a verified full-account request, we remove the account and its sites, health readings and treatment history, profiles, stored credentials and tokens, connector and transfer settings, follower access and unnecessary customer support records, attachments and derived customer information. Uploads and account access are disabled as part of erasure. We verify ownership before removing shared resources and stop for review if the scope changes or is unclear.<\/p>\n

We also check migration archives, exports, historical databases, mailbox copies and other managed storage. Unnecessary personal data is deleted or irreversibly anonymised. A pseudonym, disabled login or deleted database row alone is not treated as full erasure.<\/p>\n

Limited records we retain<\/h2>\n