Account deletion

1. How to delete in the app

In the app, follow: Home → profile in the top right → Profile → Account → Delete account.

Read the summary and choose Delete permanently. For an email and password account, confirmation uses the current authenticated session; you never need to send your password to support.

2. Apple or Google accounts

For an Apple or Google account, use the same in-app path. GREDUP requires renewed confirmation of the provider identity, revokes applicable provider access, and starts remote-first deletion only after those checks.

If confirmation, revocation, or deletion fails, email support@gredup.app, preferably from the address linked to the account, with the subject “Account deletion”. Do not send passwords, ID tokens, provider tokens, or OTP codes.

3. Before deleting

• Export your data from Settings → Data and backup if you wish to retain a copy.
• Remember that a previously exported file remains at the destination you selected and is not deleted by the GREDUP procedure.
• An Apple subscription must be managed or cancelled separately in Apple settings: deleting the GREDUP account does not automatically cancel its renewal. You may also create a new GREDUP account and use Restore purchases with the same Apple Account to transfer Premium to it; profile data is not merged.

4. What is deleted

The procedure is remote-first: it verifies the session, deletes remote artefacts associated with the user ID from the inventoried tables, and removes the Supabase Auth user last. Only after remote confirmation does it start the local purge.

• Supabase Auth account, sign-in access, and profile metadata;
• user-owned remote records for AI features and reviews listed in the deletion inventory;
• any legacy Premium technical records associated with the account;
• the Personal vault associated with that user ID;
• Personal routines, sessions, collections, custom exercises, and active workout;
• Personal nutrition, hydration, weight, sleep/recovery, goals, Journey data, and preferences included in the purge;
• local session and access to the deleted profile.

5. What is not automatically deleted

The backend creates a hash-based pseudonymous receipt to make deletion idempotent and recoverable. The receipt does not directly contain the user ID and has a technical expiry of 30 days.

We may retain strictly necessary information where required by law or to defend a legal right. Removal from active systems is started by the procedure; any technical copies or data legitimately retained by providers follow their respective cycles and applicable obligations. For requests about data held by providers or an incomplete deletion, contact support.

• local archives belonging to other accounts on the device;
• Demo data and presentation scenarios;
• Developer settings, language, and theme;
• exported backups, shared files, or copies created by the user outside the app;
• purchase or subscription records that Apple, RevenueCat, or other providers must retain under their rules and applicable obligations; deleting the GREDUP account does not cancel the Apple subscription.

6. If the procedure is interrupted

GREDUP stores a technical stage of the procedure locally. If remote removal was confirmed but the local purge was interrupted, the app blocks Personal access at the next launch and offers to complete the removal safely.

If the error continues or you cannot reach the deletion path, contact support@gredup.app without sending passwords or codes.