Data deletion policy

Last updated: June 22, 2026. Effective: July 22, 2026.

1. Overview

This Data Deletion Policy ("Policy") describes how Strand Health Inc., doing business as Everfur ("Company," "we," "us," or "our"), handles requests for the deletion of personal information and account data associated with your use of the Everfur Health Intelligence application, the Everfur Clinical Intelligence platform, the Care Team Feed, the Everfur Marketplace, prescription coordination features, walk tracking features, and all related services (collectively, the "Services").

We are committed to providing you with meaningful control over your personal data. This Policy is designed to comply with the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), the Texas Data Privacy and Security Act (TDPSA), and all other applicable U.S. state privacy laws that provide consumers with data deletion rights.

2. How to Request Data Deletion

2.1 In App Deletion

You may delete your account and associated data at any time by navigating to Settings > Account > Delete Account within the application. You will be asked to confirm your request and authenticate your identity before deletion is initiated. Upon confirmation, your account will be deactivated immediately and the deletion process will begin.

2.2 Email Request

You may submit a data deletion request by emailing privacy@everfur.com from the email address associated with your account. Please include "Data Deletion Request" in the subject line and provide the following information: your full name, the email address associated with your account, and a description of the data you wish deleted (entire account or specific categories).

2.3 Authorized Agent Requests

You may designate an authorized agent to submit a data deletion request on your behalf. Authorized agents must provide: (a) a signed written authorization from you (or a valid power of attorney); (b) verification of the agent's identity; and (c) verification of your identity as the account holder. We may contact you directly to confirm the authorization before processing the request.

2.4 Identity Verification

For security purposes, we will verify your identity before processing any deletion request. Verification methods may include: confirming your email address via a verification link sent to the account email; providing account details that match our records (such as the name and breed of a pet in your profile); completing a multi factor authentication challenge if you have MFA enabled; or other reasonable measures appropriate to the sensitivity of the data and the nature of the request. We will not fulfill requests that we cannot reasonably verify. We will use the least intrusive verification method appropriate to the request.

3. Scope of Deletion

3.1 Data That Will Be Permanently Deleted

Upon processing your account deletion request, the following data will be permanently and irreversibly deleted from all active production databases and systems within thirty (30) days:

Account Data. Account profile information (name, email address, password hash, phone number, profile photograph), account settings, notification preferences, accessibility settings, and all authentication tokens and session data.

Pet Profiles. All pet profiles and associated health data, including breed, age, weight, medical history, medications, allergies, conditions, vaccination records, dental records, surgical history, lab results, imaging reports, AI interaction history, health timeline entries, and all health assessments generated by the Services.

User Generated Content. Photographs, audio recordings, video recordings, symptom descriptions, clinical notes, free text entries, uploaded documents, and other media submitted for AI analysis or stored in your account.

Walk Tracking Data. All walk tracking history, including GPS route data (latitude, longitude, altitude, speed, heading, and accuracy data points), distance records, duration logs, pace data, elevation profiles, activity summaries, walk annotations, and all associated geospatial metadata.

Care Team Feed Content. Posts, comments, reactions, shared content, and all other contributions you authored in the Care Team Feed, including associated images and metadata.

E-Commerce Data. Shopping cart contents, wishlist items, saved items, product review content, product browsing history, and recommendation preference data within the Marketplace.

Prescription Coordination Data. Prescription coordination requests, prescription status records, and pharmacy communication logs (subject to retention exceptions in Section 3.2).

Communication History. In app messages, support tickets, chat transcripts, feedback submissions, feature requests, and bug reports.

Subscription and Billing Data. Active subscription details and stored payment method information (except as noted in Section 3.2). Note that the Apple App Store and Google Play Store maintain their own subscription records independently, which are not within our control.

Usage and Preference Data. Notification settings, feed privacy settings, sharing preferences, AI opt in/out preferences, feature toggle states, and all personalization and preference data.

Location Data. All stored precise and approximate location data associated with your account, including location data collected for nearby vet finder, health alerts, and walk tracking.

3.2 Data That May Be Retained After Deletion

Certain data may be retained after account deletion for the following purposes, and only for the minimum duration necessary:

Legal and Regulatory Obligations. Transaction records, payment history, invoices, receipts, tax related records, order records, shipping records, and prescription coordination records may be retained for up to seven (7) years as required by applicable tax, financial reporting, pharmacy recordkeeping, consumer protection, and other regulatory requirements. This data is retained in a restricted access archive and is not used for any purpose other than legal and regulatory compliance.

Fraud Prevention and Safety. Information related to fraud investigations, Terms of Service violations, abuse patterns, chargebacks, or safety incidents may be retained as necessary to protect the Company, its users, and the public from future harmful activity. This includes account identifiers (but not full account data) associated with accounts terminated for cause.

Legal Hold. Data subject to a valid legal hold, preservation notice, litigation hold, subpoena, court order, regulatory investigation, or other legal obligation, or data relevant to a pending or reasonably anticipated legal proceeding, will be retained until the hold is released or the proceeding is concluded.

De Identified Data. Aggregated, anonymized, or de identified data that can no longer be associated with you or any identifiable individual may be retained indefinitely for analytical, research, and product improvement purposes. This includes de identified data that has been incorporated into aggregate health statistics, population level analytics, model training datasets (if you previously opted in to model training), or published research findings. De identification is irreversible and the Company cannot re associate de identified data with your account after deletion.

Backup Retention. Encrypted backup copies of deleted data may persist in our backup systems for up to ninety (90) days after deletion from active systems, after which they are automatically and permanently purged through standard backup rotation and overwrite processes. Backup data is not accessible for operational purposes during this retention period.

Care Team Feed Residual Data. If content you posted to the Care Team Feed was replied to, quoted, shared, or referenced by other users, those users' references to your content may persist in their feed history in an anonymized or orphaned form (with your identity removed). Other users may have viewed, saved, screenshotted, downloaded, or otherwise captured your publicly shared content before deletion, and we cannot retrieve, recall, or delete such copies from other users' devices, accounts, or third party platforms.

Biological Sample Data. Derived analytical data from metabolomics analysis that has been de identified and incorporated into aggregate research datasets may be retained. Physical specimens are subject to laboratory partner retention policies and may be retained for up to twenty four (24) months for quality assurance and reproducibility purposes. You may request early destruction of retained specimens by contacting privacy@everfur.com, and we will use commercially reasonable efforts to coordinate early destruction with our laboratory partners.

Product Manufacturer and Fulfillment Partner Data. If you purchased products through the Marketplace that were fulfilled by third party distribution partners, shipping carriers, or pharmacy partners, those partners may retain order, shipping, and dispensing records in accordance with their own retention policies and legal obligations.

4. Timeline for Deletion

We will acknowledge your deletion request within five (5) business days and complete identity verification within ten (10) business days. Processing of verified deletion requests will be completed within thirty (30) days of successful identity verification.

During the thirty (30) day processing period, your account will be deactivated and inaccessible. You will not be able to log in, access your data, post to the Care Team Feed, make purchases, use walk tracking, or interact with any feature of the Services.

If you change your mind during this thirty (30) day period, you may contact us at privacy@everfur.com to request cancellation of the deletion and restoration of your account. Account restoration is available only during the thirty (30) day processing window and only if deletion processing has not yet been completed for the relevant data categories.

After the thirty (30) day processing period, deletion is permanent and irreversible. We cannot recover deleted data after this point.

5. Technical Deletion Methodology

We employ the following technical methods for data deletion:

Active Database Deletion. Records are permanently deleted from active production databases using standard database delete operations that remove the data from all tables, indexes, and caches. After deletion, the storage space is overwritten through normal database operations.

Object Storage Deletion. Files (images, audio, documents) stored in cloud object storage are permanently deleted, and the storage blocks are released for overwrite. Versioned objects have all versions deleted.

Search Index Purging. Records are removed from all search indexes, caches, and in memory data stores.

Analytics De Linkage. Pseudonymized analytics data is de linked from the deleted account by removing or overwriting the account identifier mapping. Aggregate analytics that do not contain account identifiers are not affected.

Sub Processor Notification. We notify relevant sub processors and service providers to delete or return data associated with the deleted account, in accordance with our data processing agreements.

6. Partial Deletion Requests

You may request deletion of specific categories of data without deleting your entire account. For example, you may request deletion of:

(a) Specific pet profiles and all associated health data.
(b) Walk tracking history (all or for specific date ranges).
(c) Care Team Feed posts (specific posts or all posts).
(d) Marketplace order history and product review content (subject to legal retention requirements for transaction records).
(e) Specific images, audio recordings, or other media files.
(f) Prescription coordination records (subject to legal retention requirements).
(g) Historical location data.
(h) AI interaction and chat history.

To submit a partial deletion request, contact privacy@everfur.com with a description of the specific data categories you wish deleted. We will process partial deletion requests within the same timeline as full account deletion requests.

7. Effects of Deletion

Account deletion will result in the following:

Permanent loss of access to the Services and all associated features. Permanent loss of all pet health data, health assessments, walk tracking history, Care Team Feed content, and account content (except data retained under Section 3.2). Cancellation of any active subscription; you will retain access through the end of any prepaid billing period already charged, but no new charges will be initiated. Inability to recover the account, restore any data, or undo the deletion after the thirty (30) day processing period. Pending Marketplace orders that have already been shipped will be delivered; unshipped orders will be cancelled and refunded. Prescription coordination requests in progress will be cancelled. Walk tracking data will be permanently removed and cannot be exported after deletion. Care Team Feed posts will be removed; replies and references from other users will be orphaned. Product reviews will be removed from the Marketplace.

8. Data Export Before Deletion

We strongly recommend that you export any data you wish to retain before initiating a deletion request. You may request a data export in a structured, machine readable format (JSON, CSV, or ZIP archive containing individual files) through your account settings (Settings > Account > Export Data) or by contacting privacy@everfur.com. Data export includes: pet profiles and health data, walk tracking history and routes, Care Team Feed posts, AI chat history, and account settings. Data export processing may take up to five (5) business days. Please allow sufficient time for export completion before initiating a deletion request.

9. B2B Data (Everfur Clinical Intelligence)

For Everfur Clinical Intelligence users operating under an enterprise or organizational agreement, data deletion requests may be subject to the terms of the applicable Master Services Agreement (MSA) or Data Processing Agreement (DPA). Individual users within an organization should contact their administrator for data deletion requests. Clinical data submitted by veterinary practices is considered the property of the veterinary practice, and deletion may require authorization from the practice administrator. Data retention obligations under the MSA or DPA may override individual deletion requests. Upon termination of an enterprise agreement, data return and deletion will be handled in accordance with the MSA or DPA terms.

10. Third Party Data

If your data has been shared with third party service providers, distribution partners, pharmacy partners, laboratory partners, or other third parties as described in our Privacy Policy, we will use commercially reasonable efforts to notify those parties of your deletion request and instruct them to delete your data. However, we cannot guarantee that all third party copies of your data will be deleted, as third party data retention practices are governed by their own privacy policies, legal obligations, and regulatory requirements. We maintain data processing agreements with our service providers that include data deletion obligations.

11. Deletion Verification

Upon completion of your deletion request, we will send a confirmation email to the email address that was associated with your account (or to an alternative email address you provide at the time of your request) confirming that the deletion has been processed. This confirmation will include: the date of deletion completion; a summary of the data categories deleted; identification of any data categories retained under Section 3.2 and the specific retention exception that applies; and the estimated date by which retained data will be purged from backup systems.

12. Automated Deletion

In addition to user initiated deletion, the following automated deletion processes operate within our systems:

Inactive Account Purge. Accounts that have had no login activity for twenty four (24) consecutive months will receive a series of reactivation notices via email (at 18 months, 21 months, and 23 months of inactivity). If no login occurs within 30 days of the final notice, the account and all associated data will be automatically deactivated and queued for deletion in accordance with the same procedures and timelines described in this Policy.

Temporary Data Purge. Data stored temporarily for session management, real time feature delivery (such as in progress walk tracking sessions that are never completed), abandoned shopping carts, and unsubmitted form drafts is automatically purged after ninety (90) days of inactivity.

Expired Consent Data. If you revoke opt in consent for model training data usage, de identification of your previously consented data is verified within thirty (30) days and the consent record is updated. While data that has already been incorporated into trained models cannot be extracted, we ensure no future training runs use your data after revocation.

13. Deletion Audit Trail

We maintain an internal audit trail of all deletion requests and actions, including: the date and time of the request; the method of request (in app, email, authorized agent); the identity verification method used; the date of verification completion; the data categories included in the deletion; the date of deletion processing completion; the identity of the systems engineer or automated process that executed the deletion; and any retention exceptions applied. Deletion audit trails are retained for five (5) years for compliance and dispute resolution purposes and are accessible only to authorized personnel.

14. Cross Border Deletion Coordination

If your personal information has been transferred to or is stored in systems located outside the United States (for example, in connection with CDN caching, global infrastructure, or sub processor processing in other jurisdictions), we will coordinate deletion across all geographic locations where your data is stored. Deletion timelines specified in this Policy apply to all geographic instances of your data.

15. California and State Specific Rights

If you are a California resident or a resident of another U.S. state with comprehensive privacy legislation providing a right to deletion, you have the right to request deletion of your personal information under applicable law, subject to statutory exceptions. We will not discriminate against you for exercising your deletion rights, including by denying services, charging different prices, providing different quality, or suggesting you will receive different treatment. If we deny your deletion request (for example, because the data falls within a legal retention exception), we will explain the specific reason for denial and inform you of your right to appeal. You may appeal by emailing privacy@everfur.com with the subject line "Deletion Appeal." We will respond to appeals within the timeframe required by your state's applicable law.

16. Contact Information

For questions about this Data Deletion Policy or to submit a deletion request:

Strand Health Inc.
d/b/a Everfur
1002 Dean Street, Suite 101, Brooklyn, NY 11238
Email: privacy@everfur.com