Delete your account and your data

You can ask us to delete your account and the personal data we hold about you, health data included. This is your right to erasure (art. 17 GDPR); exercising it is free and you do not have to explain why.

1. How to ask

Write to info@plentir.com from the same email address you signed up with, with the subject “Delete my account”.

So that we can find your data, tell us in the message:

• The email address of your Plentir account.
• Your first and last name, as you gave them when you signed up.

If you write from a different address, or if we have reasonable doubts about your identity, we may ask you for extra information to confirm it before going ahead (art. 12.6 GDPR). That is for your protection: deletion cannot be undone.

2. What we delete

When we act on your request we permanently delete:

• Your account and your sign-in credentials, including sign-in with Google or with Apple.
• Your profile and your identifying and contact details.
• Your health data: your questionnaire answers, your blood test results, your markers and the rest of your clinical information.
• The documents you uploaded (PDFs and images) and any data we had extracted from them.
• Your appointments and the messages exchanged with the team, including the link to your WhatsApp number.
• Your wearable connections: on top of deleting them, we revoke the permission you had granted us with the provider itself (Whoop, for example).

We also delete your customer record at Stripe, our payment provider, which immediately cancels any active subscription. Deletion is irreversible: once it is done we cannot bring your history back, not even if you sign up again.

3. What we keep, and why

The right to erasure has limits where another law requires us to keep information. In your case these are those limits, and the only ones:

• Payment record. Settled charges are kept to meet our accounting and tax obligations. That record holds neither your name nor your email: only an internal identifier, the amount, the date and the charge reference. Our payment provider also keeps the receipt under its own accounting obligations.
• Cookie consent receipts. These are kept for up to 3 years as proof of the choice you made, tied to a pseudonymous identifier rather than to your name (see the Cookie Policy).
• Anonymised records. A few entries we cannot erase without falsifying our own counts — an appointment already held, a sign-up on the waiting list — are kept with no personal data at all: your name and email are replaced by a generic marker.

4. Timescales

We will reply without undue delay and in any case within one month of receiving your request. If the request turns out to be particularly complex that period may be extended by two further months; we would tell you within the first month, and say why (art. 12.3 GDPR).

5. If you don’t want to delete everything

Deleting the account is not always what you need. Writing to the same address, you can also:

• Correct a detail that is wrong.
• Get a copy of your data in a portable format.
• Withdraw your consent to the processing of your health data, or stop receiving our messages, while keeping your account.

Every one of your rights is set out in full in the Privacy Policy.

6. Complaints

If you believe we have not handled your request as we should, you can lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).

Last updated: 7 August 2026.