Data Retention & Deletion
GDPR / DPDP Act compliant policy
Retention periods
- Profile & family records — kept while your account is active; removed within 30 days of deletion request.
- Payments & ledger entries — retained for 7 years to comply with financial-record laws, even after account deletion. Linked personal identifiers are anonymised.
- Visitor logs — retained for 90 days, then purged.
- KYC documents — deleted within 30 days of deletion request or when verification is revoked.
- Push tokens & session data — cleared on sign-out.
How to delete your account
- Open Settings → More → Delete account.
- Type
DELETEto confirm. - Your profile, family members and KYC are queued for removal within 48 hours.
- You will receive an email confirmation when the deletion completes.
Data export
You can request a copy of all data we hold about you. Email your society admin or SociyoHub support; we deliver a JSON export within 30 days at no cost.
What deletion does not remove
For audit, legal and accounting reasons we retain (in anonymised form): aggregate payment totals, society-level financial reports and security event logs. No personal identifiers remain attached.
Grievance officer
Under the DPDP Act, you may contact your society's designated grievance officer (listed in the society profile) for any privacy complaint.