Data Deletion
Last updated: 12 June 2026 · Effective date: 12 June 2026
1. Your Right to Deletion
You can ask VaultAir Systems (Pty) Ltd to delete the personal information we hold about you in connection with Jan on Health ("JoH"). This right is recognised under the Protection of Personal Information Act, 2013 (POPIA) in South Africa, the General Data Protection Regulation (GDPR) Article 17 ("right to erasure") in the EU/EEA, the UK GDPR, and other applicable data protection laws.
This page explains how to request deletion of JoH account data, conversation history, and related personal information. It should be read together with our Privacy Policy.
2. What You Can Request
In addition to deletion, you may also request to:
| Right | Description |
|---|---|
| Access | Receive a copy of the personal information we hold about you. |
| Correct | Fix inaccurate or incomplete information. |
| Delete | Have your personal information erased where there is no overriding legal reason to keep it. |
| Restrict or object | Limit or object to certain processing of your information. |
3. What JoH Data Can Be Deleted
Depending on your request, we can delete or anonymise data such as:
- your WhatsApp phone number and linked account profile;
- conversation history, messages, and media you sent to JoH;
- health-related facts, goals, and short-term context stored for personalisation;
- consent records (subject to legal retention requirements);
- subscription and billing references (payment card details are held by Paystack, not by us).
Some data may be retained where required by law or for legitimate purposes (see Section 6).
4. How to Request Deletion
You can request deletion in any of the following ways:
- Email: privacy@vaultair.systems with the subject line "Data Deletion" or "Privacy Request".
- WhatsApp: Message JoH and ask to delete your account and data. We may ask you to confirm via the same WhatsApp number to verify your identity.
Please tell us what you would like deleted. To protect your information, we may need to verify your identity (for example, by confirming your WhatsApp number).
5. What Happens Next
- We acknowledge your request and may ask for verification or clarification.
- We aim to complete verified requests within 30 days (or one month where GDPR/UK GDPR applies). If a request is complex, we will let you know and may extend this period as permitted by law.
- We confirm in writing once your request has been actioned.
- There is no charge for a reasonable request. We may decline or charge a reasonable fee only where the law allows (for example, manifestly unfounded or excessive requests).
6. Exceptions and Retention
We will delete or anonymise your personal information unless we are required or permitted by law to keep it. We may retain limited information where necessary to:
- comply with legal, tax, accounting, or regulatory obligations (for example, billing records typically 5–7 years);
- establish, exercise, or defend legal claims;
- maintain consent and audit records for compliance purposes; or
- detect and prevent fraud, abuse, or security incidents.
Information held in routine encrypted backups is removed as those backups cycle out of retention. Where we cannot fully delete data immediately, we restrict its processing until deletion is possible.
7. Lodging a Complaint
If you are unhappy with how we handle your request, you may lodge a complaint with a supervisory authority:
- South Africa (POPIA): Information Regulator
- European Union (GDPR): your local data protection authority (EDPB list)
- United Kingdom (UK GDPR): Information Commissioner's Office (ICO)
8. Contact Us
For deletion or other privacy requests:
VaultAir Systems (Pty) Ltd
Information Officer: Jan Pool
Email: privacy@vaultair.systems
Subject line: Data Deletion or Privacy Request
Website: Contact us
This page should be read together with our Privacy Policy and Terms of Service.