1. I.

   Full export, on demand.

   Every Diagnostic ever delivered, every wearable and sensor reading ever ingested, every intervention ever logged. PDF and JSON. One click from the portal. We do not gate exports behind an account-closure flow.

2. II.

   Permanent read access to your final Diagnostic.

   Your final delivered Diagnostic remains accessible to you for life, even if you cancel your subscription, even if MAVI World ever ceases operation. PDFs are mailed to a backup address you provide, encrypted, on request.

3. III.

   Right to delete, propagating.

   Permanent deletion. We delete from our Zurich servers, we trigger deletion at Whoop, Oura, Terra, and every connected wearable, we confirm in writing within thirty days. The thirty-day tombstone is required by certain wearable terms of service; nothing in our control extends beyond it.

4. IV.

   No third-party sale, ever.

   We do not sell your data, ever, to anyone, even with consent. This is a contractual commitment, not a privacy-policy paragraph. Whoop terms of service section 3.1.3 reinforces it for connected-wearable data.

5. V.

   Zurich only.

   All MAVI data resides in Zurich-region infrastructure, encrypted at rest, GDPR and Swiss nFADP compliant. There are no US-region replicas. Backups are encrypted and held in the same residency.

6. VI.

   Continuity escrow.

   In the unlikely event MAVI World is wound up, all customer Diagnostics are escrowed with a UK-based independent custodian under a deed of trust, with instructions to deliver a final encrypted PDF copy to every customer of record within 60 days.