Genie Health – Data Deletion Policy

Effective Date: 27 April 2026

This Policy governs both Genie (the consumer service for individual Members) and Genie SmartCare (the platform for Healthcare Partners). It is read together with the applicable Terms of Service and our Privacy Policy.

1. Scope and Definitions

This Data Deletion Policy describes how Genie Health Pte. Ltd. and its affiliates retain and dispose of personal data, business data and operational data processed in connection with Genie and Genie SmartCare. This Policy is supplementary to, and incorporated by reference into, both the Consumer Terms of Service and the SmartCare Terms of Service.

2. Roles and Responsibilities

For data collected directly from Members, Genie acts as a Data Controller under the Singapore Personal Data Protection Act 2012. For Client Data processed through Genie SmartCare, the Client is the Data Controller and Genie acts as a Data Intermediary (Processor).

4. Retention and Deletion – Members (Genie)

Members may delete their account at any time via Settings → Support in the Genie App, or by emailing support@geniehealth.care. Following a verified deletion request, account access is disabled immediately, Member data is permanently erased from active systems within 90 days, and encrypted backups are purged within the same 90-day period.

5. Retention and Deletion – Healthcare Partners (SmartCare)

Upon termination of a Client relationship, the Client has 30 days to export Client Data. Genie then permanently erases Client Data within a further 30 days and purges encrypted backups within 90 days of the effective termination date. Clients may request earlier export or deletion by writing to privacy@geniehealth.care.

6. Materials, AI Training and Outputs

Materials tied to a Member account are deleted on account deletion. Deletion of source Materials does not extract or reverse the contribution those Materials may have already made to a trained AI model.

8. Disposal Methods

Genie applies disposal methods consistent with NIST SP 800-88 (Guidelines for Media Sanitization), including cryptographic erasure, secure overwrite, and logical deletion followed by database purge.

9. Exceptions to Deletion

Genie may retain data to comply with legal obligations, establish or defend legal claims, investigate fraud or security incidents, or maintain aggregated de-identified data.

10. How to Request Deletion

Members may request deletion via in-application account controls or by emailing privacy@geniehealth.care. Healthcare Partners may request deletion via written notice from a duly authorised contact addressed to privacy@geniehealth.care. Genie acknowledges deletion requests within seven calendar days.

13. Governing Law

This Policy is governed by the laws of Singapore. Any dispute is subject to the dispute resolution provisions of the applicable Terms of Service.

14. Contact

Email: privacy@geniehealth.care

Genie Health Pte. Ltd., 60 Paya Lebar Road, #07-54 Paya Lebar Square, Singapore 409051