Effective and last updated: September 2, 2026

Delete in the app

1. After signing in, open the account/settings icon from Home.
2. Select Account → Delete account.
3. Reauthenticate with Google or Apple and complete the final confirmation.

For Apple sign-in accounts, NoveraFlow revokes the Apple token first whenever usable credentials are available. If no revocable credential can be obtained, verified account deletion still completes and the app links to Apple's manual disconnect steps. This Apple step does not apply to Google sign-in accounts.

Signing out does not delete an account. Completed deletion cannot be undone.

If you cannot use the app

Send an email with the dedicated deletion subject

Keep the subject NoveraFlow Account Deletion Request. Include only the sign-in provider (Google/Apple) and the account email where we can reply. If you use Apple's Hide My Email, use the relay address shown in Apple settings. Do not send a UUID, password, authorization code, token, record, or support message content.

The operator sends a one-time identity-verification procedure to the account-linked email. Only verified requests are processed for account deletion; failed verification results in no deletion.

Deletion and retention

• Supabase Auth sign-in account: permanently deleted after server cleanup and required sign-in provider handling
• Account UUID links and Support notification outbox rows: removed immediately
• Support content linked to account deletion: hidden from normal access immediately and physically deleted within 7 days
• Account-owned Push receipts, devices, and encrypted tokens: removed immediately. The matching recipient account UUID field is immediately removed from retained Push dispatch audit JSON without modifying another user's dispatch
• Support rate-limit hash: no more than 24 hours after last use
• Inactive open inquiries: automatically closed after 90 days without activity
• Ordinary closed inquiry content: 180 days after closure
• Backups: up to 30 days, with deletion replay after restore
• Keyed-HMAC replay ledger: up to 31 days
• Minimal tombstone/audit and deletion receipt without account UUID, email, or content: up to 365 days
• Device-generated anonymous analytics identifier: separate from the sign-in account UUID and not automatically linked to or removed by account deletion. Clearing app data removes the local copy, but server-received analytics events that are not account-linked are not deleted through account deletion

The current server implementation has no automatic time-based expiry for anonymous analytics events and AI feedback quota/usage entries that are separate from the sign-in account UUID, or for the remaining Push dispatch audit fields after recipient UUID removal, so their retention is not bounded by a fixed period. These entries are not automatically linked to Supabase account deletion.

Records on your device

Records on your phone are kept by default. They are deleted only if you separately select Also delete records on this device; app-managed records and attachments are removed only after server completion. You must delete exported backup ZIP files yourself because the app no longer manages them.

Status and contact

The app shows reauthentication, final confirmation, requesting, processing, complete, and safe-retry states. Contact: [email protected]

Privacy Policy · Terms of Service