Delete your RafaNest account and data

RafaNest is developed by Healthy Connection Ltd. This page sets out how to close and delete your account, what happens the moment you do, and which records healthcare law obliges us to keep for a period before they are deleted.

Practitioners — the RafaNest app

Open the RafaNest app and sign in, or sign in at rafanest.com.
Go to Settings.
Choose Delete My Account and confirm.

Confirming immediately deactivates your clinic — the public booking page stops, no further appointments or charges can be made — and disables your login, so you cannot sign back in. Your records are then retained for the HIPAA record-retention period described below, because as the clinic you are their custodian. Once that period allows it, our team completes the deletion and will follow up with you. This cannot be undone from the app.

Patients — your patient portal

Sign in to your patient portal at your clinic’s RafaNest address.
Open Settings from your dashboard.
Under Delete account, choose Delete my account and confirm.

Confirming immediately replaces the personal details on your profile — name, email address and phone number — with pseudonyms, marks the account closed, and disables your sign-in. The underlying record is retained for seven years as healthcare law requires and is then deleted. The same Settings page offers Download my data, a JSON copy of everything held about you: profile, appointments, payments, treatment cards and privacy records. Download it first if you want to keep a copy.

What is removed straight away

Your ability to sign in — the login is disabled at once, on both paths.
For a patient: the identifying details on the profile, replaced with pseudonyms.
For a practitioner: the clinic stops serving its public booking page, and no further appointments, notifications or charges are created.
Session audio recorded for AI transcription is transient and is deleted within minutes of processing — this happens whether or not you close your account.

What is kept, and for how long

Some records cannot be erased on request, because a healthcare provider is legally obliged to keep them. They are retained only for the required period and then deleted.

Clinical records

Health records are kept for the period healthcare law requires of the clinic that created them — in the United States commonly seven years — and are then deleted. Your clinician, not RafaNest, is the custodian of these records; RafaNest holds them on their behalf.

Financial records

Payment and invoice rows are retained for the statutory tax and accounting period. They cannot be edited or removed before then, by us or by the clinic.

Security audit log

Sign-in and record-access events are kept in an append-only log for the period HIPAA §164.312(b) requires. They record that an action happened and by whom — not the contents of any record.

If you cannot sign in

Email privacy@rafanest.com from the address on the account and we will verify you and carry out the same steps. If you no longer control that address, say so and we will tell you what else we can accept as proof. You may also ask us there to erase anything that remains once a retention period has run out.

See also the Notice of Privacy Practices for the full account of how information is used, disclosed and protected.