Account Deletion, Retention and Data Rights Policy

We keep data only for its stated purpose: raw location up to 90 days, raw synced health data up to 12 months, crash events up to 90 days and backups up to 35 days after active deletion. Booking, payment, tax, consent, dispute and security records follow applicable legal limitation periods. Expired data is deleted or irreversibly anonymised; a documented legal hold preserves only its necessary scope.

Controls include encryption in transit and where appropriate at rest, least privilege, strong authentication, tenant separation, secret management, audit logging, secure development, vulnerability handling, backups and incident response. Sensitive admin access is purpose-limited and recorded. No system is risk-free, but we maintain measures proportionate to the data and threat.

Depending on applicable law you may request access, correction, deletion, restriction, portability and objection; withdraw consent; and request human review of a solely automated decision with legal or similarly significant effect. Requests are normally free and answered within the statutory period after proportionate identity verification.

Delete an account in app or through the public deletion route. We close access, stop ordinary processing, remove or anonymise profile and social content, revoke push tokens and send deletion to processors. Required financial, fraud or legal records are isolated and not reused. Backups expire within their normal cycle and restored data receives the deletion instruction again.

Privacy requests go to privacy@bukiby.com. You may complain to your competent data-protection authority. Material changes are notified before effect and a new purpose or sensitive-data scope requires a new lawful basis and, where required, fresh consent. Document version and consent evidence are retained.

MIND TECH CONSULTANCY LTD

Trading as: Bukiby

Company number

11481944

VAT number

GB 338119402

Registered office

3 Orchid Mews, Harwell, Didcot, England, OX11 6EX