Retention schedule
How long BetaDocta keeps each kind of information, and what happens to it at the end. Published because a policy that does not say “for how long” has not really said anything.
How long BetaDocta keeps each kind of information, and what happens to it at the end. Published because a policy that does not say “for how long” has not really said anything.
Most rows below say we never hold it. That is the point of how BetaDocta is built.
Version 1.0, 12 September 2026. Reviewed at least once a year by Legal and Compliance with Medical Affairs.
| What | Where it lives | How long | Then what |
|---|---|---|---|
| Symptom checks and results | On your phone only | Until you delete them | You clear them; we never had them |
| Seizure, headache and blood-pressure diaries | On your phone only | Until you delete them | You clear them; we never had them |
| Medication list and reminders | On your phone only | Until you delete them | You clear them; we never had them |
| Brain Health Check answers | On your phone only | Until you delete them | You clear them; we never had them |
| An unsent screening draft | On your phone only | Until sent or deleted | Deleted with the draft |
| Health worker’s name-to-case-number list | On that health worker’s phone only | Until they delete it | They clear it; we never had it |
| Account: name, phone, language, role, facility | Our servers | While the account is open, then 90 days | Deleted |
| A case sent to a specialist (clinical detail, no patient name) | Our servers | 5 years from the last entry on the case | Stripped to anonymous counts, then deleted |
| Photographs and voice notes attached to a case | Our servers | Deleted 90 days after the case closes | Deleted, earlier than the case itself |
| Specialist’s reply and referral outcome | Our servers | 5 years from the last entry on the case | Stripped to anonymous counts, then deleted |
| Consent record (what was agreed, which version, when) | Your phone, and with the account | As long as the account, plus 3 years | Deleted |
| Anonymous counts for reporting | Our servers | Indefinitely | Kept: nothing in them identifies anyone |
| Security and access logs | Our servers | 12 months | Deleted |
| Support messages you send us | Our servers | 24 months | Deleted |
A neurological condition is followed over years, not weeks. A seizure pattern, a stroke recovery or a medication change only makes sense next to what came before. Five years from the last entry is long enough to be clinically useful and short enough that we are not holding information nobody needs.
Photographs and voice notes are different. They are the most identifying things on the platform and they are only needed while the case is live, so they go first.
The rows above marked “our servers” are today hosted outside Cameroon. Moving them onto national infrastructure is a decided and planned piece of work. This page will be updated with the date when it is complete.