Legal
Data retention
What we keep, for how long, and how to ask for deletion. Last reviewed 30 September 2026.
Retention by data type
| Data | How long |
|---|---|
| Owner and tag profile | While your tag is active and until you ask us to delete it. |
| Scanner conversations | Access links are temporary. Older conversation records are pruned automatically; the current build prunes them after about 30 days. |
| One-time codes (recovery, doctor access) | Minutes. They expire and allow only a few attempts. |
| Health emergency profile and vault | Until you remove it or request deletion. Access by doctors is logged. |
| Orders, payments, refunds and GST invoices | For the period required by Indian tax and accounting law, even if you delete your tag data. The exact period is being confirmed with our advisers and will be stated here. |
| Security and audit logs | For a limited period. Abuse telemetry is hashed where implemented. |
Deleting your data
- Owners can download their tag data and submit an erasure request from My account.
- You can also write to support@bidua.in with your Tag ID or order ID.
- Deleting data deactivates the linked QR identity. Records we must keep by law are retained but limited to that purpose.
- We aim to respond within 30 days.
See the privacy policy for your rights under the DPDP Act.