Statutory Account Deletion & Data Erasure Policy
Mandatory deletion instructions and policy satisfying DPDPA 2023 right to erasure, Google Play Store account deletion mandate, and Apple App Store Review Guideline 5.1.1(v).
You have the absolute right to delete your GymBeam account at any time, directly inside the app or through our public web deletion portal. Your personal identifiers are permanently purged within 30 days.
- ✓In-App Deletion: Go to Profile > Settings > Account Security > Request Account Deletion.
- ✓Web Deletion Portal: Submit your request on our website even if you have uninstalled the app.
- ✓Immediate Lockout: Account access is revoked within 24 hours of verification.
- ✓30-Day Permanent Purge: Personal data (name, email, phone, photos) is permanently deleted.
- ✓Tax Archive: By Indian law (Companies Act Sec 128), financial transaction invoices are archived for 8 years.
Right to Erasure under DPDPA 2023 & Store Policies
1.1 In accordance with Section 12(3) of the Digital Personal Data Protection Act, 2023, Google Play Developer Program Policies on Account Deletion, and Apple App Store Review Guideline 5.1.1(v), every registered user has the right to permanently delete their account and demand the complete erasure of their personal data.
Step-by-Step Deletion Process
2.1 In-App Submission
(a) Navigate to Profile > Settings > Account Security.
(b) Tap 'Request Account Deletion' and enter your registered password or confirm via SMS OTP.
(c) Confirm the irreversible deletion warning prompt.
2.2 Web-Based Alternative Pathway (For users without the app installed)
Users may submit a formal deletion request using our interactive online tool below, or by emailing privacy@aethrive.com from their registered email address with the subject line: 'DATA ERASURE REQUEST - [Registered Phone]'.
Our Data Operations team validates ownership via an SMS/email verification challenge before queuing the account for cryptographic erasure.
Execution Timeline & Data Erasure Scope
Upon receiving a verified deletion request:
3.1 Within 24 hours: Account access is revoked; active session tokens are invalidated; upcoming unpaid slot reservations are canceled.
3.2 Within 30 calendar days: Direct personal identifiers (Name, Email, Phone Number, Profile Photo, Device IDs, and KYC documentation) are permanently purged or cryptographically anonymized from production PostgreSQL databases.
3.3 Static Backups: Residual backup snapshots containing historical database states are overwritten and phased out within standard rotational backup retention cycles (maximum 90 days).
Statutory Retention Exceptions
Legal Audit Archive
Under Section 128 of the Companies Act 2013 and Section 194-O of the Income Tax Act 1961, financial invoices and TDS logs must be archived for 8 financial years.
In accordance with Section 8(7) of the DPDPA 2023, the right to erasure does not compel the deletion of records where retention is mandated by law:
4.1 Financial Ledger & Tax Records: Invoice details, Razorpay payment reference numbers, transaction amounts, and TDS deduction records must be retained for 8 (eight) financial years pursuant to Section 128 of the Companies Act, 2013 and Indian GST/Income Tax statutes. Such records shall be decoupled from your personal profile and held in a restricted archive accessible solely for statutory audit and taxation purposes.
4.2 Unresolved Disputes & Chargebacks: Where an account is subject to an active payment dispute, criminal fraud investigation, or unresolved chargeback, erasure shall be stayed until formal legal resolution.
Statutory Data Erasure & Account Deletion Portal
Mandatory Web Mechanism under Google Play Policies & Section 12(3) of DPDPA 2023
Statutory Grievance & Compliance Escalation
Operated in adherence to Rule 3(2) of the IT Rules 2021 & Section 13 of DPDPA 2023