Account Deletion

The short version

• In the app: Settings › Account › Delete account.
• Can't sign in? Email privacy@fondfully.com from the address on your account.
• Your account data is deleted from our servers within 24 hours, and from our backups within 30 days.
• Your vault in iCloud or Google Drive, and on your phone, is deleted only if you choose. You can also delete it yourself.
• Deleting your account doesn't cancel a subscription. Cancel Plus in the App Store or Google Play first.

This page applies to Fondfully, the gift planner app for iPhone and Android, provided by Epicalin, LLC.

1. Before you delete

• Cancel Plus if you have a Plus Yearly subscription (see section 5). Deleting your account doesn't stop the store charging you.
• Export your vault if you'd like to keep anything: Settings › Privacy & security › Export your vault.
• Know that it's permanent. We can't restore a deleted account, and Plus on it can't be moved to a new account.

2. Delete your account in the app

On iPhone:

1. Open Fondfully and tap the gear on Home to open Settings.
2. Tap Account, then Delete account.
3. Read what will be deleted from our servers.
4. Choose whether to also delete your vault from your iCloud (or Google Drive) and from this iPhone.
5. Type DELETE and confirm.

On Android:

1. Open Fondfully and tap the gear on Home to open Settings.
2. Tap Account, then Delete account.
3. Read what will be deleted from our servers.
4. Choose whether to also delete your vault from your Google Drive and from this phone.
5. Type DELETE and confirm.

We'll send a last email to confirm your account is deleted.

3. If you can't sign in

Email privacy@fondfully.com from the email address on your account, with the subject "Delete my account". If you used Sign in with Apple and chose Hide My Email, tell us the relay address Apple created for Fondfully. On iPhone, you'll find it in the Settings app: tap your name, then Sign-In & Security, then Sign in with Apple, then Fondfully.

We'll check that the request comes from the account holder, usually by email to the address on the account. We'll never ask for your password, vault passphrase or recovery code. Once we've confirmed it, we'll delete your account within 24 hours, and in any case within 30 days of your request.

We can't delete the vault in your iCloud or Google Drive for you, because we have no access to it. Section 4 explains how to delete it yourself.

4. What's deleted, and when

From our servers, within 24 hours:

• your account: email address, name, password and sign-in methods, with Fondfully's access to your Apple sign-in ended if you used Apple;
• your signed-in devices and sessions, and any verification codes or reset links;
• your plan, purchase records, redeemed codes, and any Plus or notes our team added to your account;
• your support conversations, problem reports, suggestions and screenshots, including messages sent from your account's email address; and
• the gift briefs you shared and every claim on them. Their links stop working.

From our backups, within 30 days. Our database backups are replaced on a rolling 30-day cycle.

Your vault, only if you choose:

• In the app, you can choose to delete your vault from your iCloud or Google Drive, and from the phone you're using.
• On any other device, delete the Fondfully app to remove the vault stored there.
• To delete the vault from iCloud yourself: in the iPhone Settings app, tap your name, then iCloud, then Manage Account Storage, choose Fondfully if it's listed, and delete its data.
• To delete the vault from Google Drive yourself: on a computer, open drive.google.com, click the gear, then Settings, then Manage apps. Find Fondfully, click Options, then Delete hidden app data.

5. What isn't deleted automatically

• Subscriptions. Apple or Google keeps billing until you cancel. On iPhone: Settings app › your name › Subscriptions › Fondfully › Cancel Subscription. On Android: Google Play Store › profile icon › Payments & subscriptions › Subscriptions › Fondfully › Cancel subscription.
• Store records. Apple and Google keep their own records of your purchases, under their privacy policies.
• Your vault, unless you chose to delete it, as described above.
• Information that isn't linked to you: anonymous diagnostics and usage statistics, which are stored without your account and expire within 90 days, and totals without identifiers.
• Short-lived records: email delivery records (with your address stored only as a one-way hash) and security logs, which expire within 30 days.
• Our team's audit log, which records actions staff took on accounts (such as granting Plus), referring to your account only by an internal number that's no longer connected to you. Details such as notes or reasons are removed when your account is deleted, and audit entries are deleted after two years.
• A record of the deletion, kept for three years so we can show we honored it. It contains only a one-way code derived from your account's internal number, who asked for it and when; no email address, name or other details.
• Links you sent. Messages containing gift brief links stay wherever you sent them, but the links stop working.

6. Questions

Email privacy@fondfully.com. Our Privacy Policy explains how we handle personal information, and our Data Processing Summary lists every retention period.