Data deletion

If you are a patient, the direct route is the practice that treats you. It is the controller of your health record and it resolves the request from the panel, with no intermediary. Ask during a visit, by phone, or through the same WhatsApp thread you use with the assistant.

If you would rather write to Kinti Med, use ventas@kintimed.com with the subject “Data deletion”. Include the phone number you message the assistant from and the name of the practice that treats you. That pair is what locates your records: the same number may be registered at several practices, and deleting the wrong one cannot be undone.

Requests are acknowledged within three business days and resolved within a maximum of fifteen business days. Where the practice is the one that must resolve it, Kinti Med passes the request on and assists as needed. No request is left unanswered.

No reason has to be given, and no account on the panel is needed: having messaged the assistant at least once is enough.

The messages exchanged with the WhatsApp assistant and the whole conversation thread. The phone numbers linked to your record. The log of consents given and withdrawn. The contact details the practice entered about you.

The phone number is unlinked from every record, so a later message from that same phone reaches the system as that of an unknown person: no history, no name, and no access to any clinical data.

The clinical record is not deleted on request. Ecuadorian rules on the retention of medical records oblige the health facility to keep it for a set period, and that duty falls on the practice, not on Kinti Med. It is the same limit a paper folder in an archive would have.

The same applies to billing documents, subject to tax retention periods.

Saying so up front is part of answering a deletion request honestly. What does happen in those cases: the data stops being used for any other purpose. It does not feed the assistant, it does not trigger reminders, and it is not disclosed to anyone.

Messages from people who are not patients of any practice: ninety days, with an automatic daily purge.

Audio from a visit recorded with the voice assistant: deleted as soon as the transcript is ready, with an hourly sweep that catches interrupted sessions. The transcript and the draft are deleted when the clinical record is completed, and in any case after seven days.

These periods do not depend on anyone remembering them: they are scheduled system tasks.

Authorisation to transcribe a visit can be withdrawn at any time, with no reason given, by telling the physician or writing it over WhatsApp. Withdrawing it does not affect care: the visit proceeds exactly the same.

Withdrawing consent stops future recordings. To also delete what was already transcribed and written into the clinical record, ask separately through the routes in the first section — and there the legal retention limit on the record applies.

Termination is requested through the same channels. Before closure, an export of the clinical information is provided in a readable format: the data belongs to the practice and its patients, and portability is a right, not a commercial courtesy.

Once the export is done, the data is deleted from Kinti Med systems. Backups follow their own rotation cycle and are overwritten within the hosting provider’s retention window.

A complaint may be filed with Ecuador’s Superintendency of Personal Data Protection, which is the supervisory authority. Doing so does not require exhausting any procedure with us first.