Delete your CogTrack account and data
CogTrack (https://cogtrack.in), operated by Yajvin Agarwal and Gaurav Arutla
Who this page is for
This page explains how to ask CogTrack to delete your account and the personal data associated with it. It covers the CogTrack Android application, web application and website. You do not need to have the app installed, or to sign in, to use this page.
How to make a request
Send your request to: pnctapp@gmail.com
Subject line: Delete my CogTrack account and data
Please tell us which of the three situations below applies to you. We verify every request before deleting anything, so that nobody can delete another person's data.
1. You have an account linked to an email address
Make your request using the page above and tell us the email address registered to the account. Knowing an email address is not enough to delete an account. We will check that the request really comes from the holder of that address, for example by sending a confirmation to it, before we act.
2. You use CogTrack with a participant code and PIN (for example through a hospital or clinic)
A participant code on its own is not treated as proof of identity, so please do not rely on sending a code alone. Make your request and tell us which hospital, clinic or Programme gave you the code. We will tell you what verification we need, which may involve confirmation through the Programme or other proportionate steps. We do not delete a participant's records on the strength of a code alone.
3. You took part in a one-session community or research programme
Some community and research sessions do not give us a name, contact details or a sign-in that we can use to recognise you later. If we cannot safely identify your record from a later request without collecting extra identifying information, we may be unable to find and delete it. We will explain this in our reply. We do not collect additional identifying information solely to process a request, and we do not identify or delete a record using demographic details such as age, sex, education or language alone. If your data has already been irreversibly anonymised or aggregated, it may no longer be possible to identify your contribution.
What we normally delete
After verification, we delete the personal data associated with you from the records CogTrack controls, and we instruct our service providers to do the same. Depending on how you used CogTrack, this includes:
your account and sign-in records, including sessions, invitations, and verification and password-reset records;
your profile and participant information;
your test sessions, your responses, and your raw and derived scores;
the links between your baseline and follow-up sessions;
relationships between you and clinicians or hospitals in CogTrack;
questionnaire and other assessment data, including recovery, functioning and risk-related information;
programme, hospital or organisation linkage that identifies you; and
any other personal data we hold that is associated with you.
Switching off, freezing or deactivating an account is not deletion.
What may be kept, and why
We keep only what is necessary, and only for as long as the reason applies. This is limited to:
information that applicable law requires us to keep, including minimum retention periods that apply to certain personal data, traffic data and logs;
information that applicable law permits us to keep for research or statistical purposes, but only where an ethics-approved research protocol requires it;
information needed to establish, exercise or defend legal claims;
limited security and audit records, where justified;
copies in backups and logs, until they are overwritten or deleted in the ordinary course.
When we reply to your request, we will tell you what, if anything, has been kept, why, and for how long.
Anonymised and aggregated data
Information that was irreversibly anonymised or aggregated before your request is not personal data, because it can no longer reasonably be linked to you. We cannot trace it back to you, so it may not be possible to remove it, and we may keep and use it. Data that can still reasonably be linked to you is not treated as anonymised and is covered by deletion.
Copies held by hospitals, clinicians and programmes
We can delete the copies that CogTrack controls. A hospital, clinician or programme organisation that independently holds its own lawful copy has its own responsibilities for it, and you should contact that organisation directly about it. Where CogTrack itself remains responsible for a copy, these limits do not reduce our obligations.
How long this takes
We will respond to your request within a reasonable period, and in any case within ninety (90) days of receiving it. We will confirm when deletion is complete. If you are unhappy with how we have handled your request, you can make a grievance using the contact details in our Privacy Policy, and we will respond to it within one month.
For more about how CogTrack handles information, see the CogTrack Privacy Policy, in particular section 11.