Delete your Medi-Chi account and data
You can ask us to erase your Medi-Chi account and everything stored against it at any time, for any reason. This page explains exactly how to do it, what disappears, what we are legally required to keep, and how long each part takes.
Two different requests, one page
Both the Delete data and Delete account options in the app bring you here. Pick the one you want below — they are not the same thing.
Delete data
Your login stays active. We erase the clinical content stored against it: saved cases, diagnosis history, case templates, tongue photos, questionnaire answers and handouts.
Your email, subscription and any purchases you've made are kept, so you can keep using Medi-Chi with a clean slate.
Choose data deletionDelete account
Everything above is erased plus the account itself: your sign-in, profile, practitioner details and preferences. You lose access to Medi-Chi and to anything you purchased through it.
Any active subscription is cancelled. Billing records we're legally required to keep are listed further down this page.
Choose account deletionNot sure? Start with Delete data — it's the reversible-in-spirit option, since you keep your account and can build fresh records. Deleting the account can't be undone.
How to make either request
- 1
Sign in to your Medi-Chi account
Open medichi.online/auth and sign in with the email address, magic link, or Google account you registered with.
- 2
Clear your clinical data first (optional)
On Privacy & data retention you can delete uploaded tongue photos individually, review your consent choices, and set an automatic retention window. This step is optional — deleting the account removes all of it anyway.
- 3
Cancel any active subscription
If you have a paid plan, cancel it from Manage subscription. Deleting your account does not automatically stop billing handled by the payment provider.
- 4
Request deletion
Email notify@medichi.online from the address on the account with the subject "Delete my Medi-Chi account". We verify the request against the registered address, then action it.
- 5
Confirmation
You will get a written confirmation once the account and its associated records have been erased. No further sign-in is possible after that point.
What gets deleted
- Your account and sign-in credentials (email, password hash, linked Google identity)
- Saved diagnoses, cases, notes, tags and pinned items
- Symptom questionnaire responses and pattern results
- Uploaded tongue photographs and any generated image analysis
- Practitioner profile, letterhead details, clinic address and phone number
- Case templates, clinical handouts and saved worked examples
- Clinic Mode and student-clinic memberships you own
- Privacy and consent preferences tied to your user ID
What we keep, and why
Payment and invoice records (7 years)
Held by our payment processor (Stripe) and required for Australian tax and financial-record law. These contain transaction data, not clinical data.
Anonymised analytics events (Retained in aggregate)
Aggregate usage counts that carry no name, email or user ID and cannot be traced back to you, so they cannot be individually deleted.
Security and audit logs (12 months)
Sign-in and access logs with personal identifiers redacted, kept for fraud and abuse investigation.
Encrypted backups (30 days)
Deleted rows persist in rolling encrypted backups until those backups expire. They are not restorable into the live app.
Retention timeline
| When | What happens |
|---|---|
| Immediately | Access is revoked and your data stops being served anywhere in the app. |
| Within 7 days | Account record and all clinical data are permanently erased from the live database. |
| Within 30 days | Encrypted backups containing the deleted data roll off and expire. |
| 7 years | Financial records held by the payment processor expire under statutory retention. |
Before you delete
- Deletion is permanent. There is no restore, and we cannot recover saved cases or handouts once they are gone — export anything you need first.
- If you are a practitioner with clinical obligations, check your own record-keeping requirements (AHPRA and state health-records law) before erasing patient-related notes.
- Purchased ebooks and audiobooks are tied to the account. Download them before deletion; re-issue after deletion requires a new purchase.
- Deleting the account does not cancel an active subscription — cancel it first so billing stops.
Questions about any of this? See the Privacy Policy and the Trust & security page, or email notify@medichi.online.