Account Deletion

The short version

• In the app: Settings › Account › Delete account.
• Can't sign in, or no longer have the app? Email privacy@fondfully.com from the address on your account.
• Your account data is deleted from our servers within 24 hours, and from our backups within 30 days.
• Your vault in iCloud or Google Drive, and on your phone, is deleted only if you choose. You can also delete it yourself.
• Deleting your account doesn't cancel a subscription. Cancel Plus in the App Store or Google Play first.

This page applies to Fondfully, the gift planner app for iPhone and Android, provided by Epicalin, LLC.

1. Before you delete

• Cancel Plus if you have a Plus Yearly subscription (see section 5). Deleting your account doesn't stop Apple or Google charging you.
• Export your vault if you'd like to keep anything: Settings › Privacy & security › Export your vault.
• Know that it's permanent. We can't restore a deleted account, and Plus on it can't be moved to a new account.

2. Delete your account in the app

On iPhone:

1. Open Fondfully and tap the gear on Home to open Settings.
2. Tap Account, then Delete account.
3. Read what will be deleted from our servers.
4. Choose whether to also delete your vault from this iPhone and from your cloud (iCloud, and Google Drive if you also back up there).
5. Type DELETE and tap Delete account.

On Android:

1. Open Fondfully and tap the gear on Home to open Settings.
2. In the Account section, tap Delete account.
3. Read what will be deleted from our servers.
4. Choose whether to also delete your backup in Google Drive, and whether to delete the vault on this phone.
5. Type DELETE and tap Delete my account.

You'll also find Delete account under Settings › What we store, where. We'll send a last email to confirm your account is deleted.

3. If you can't sign in

You don't need the app to delete your account. Email privacy@fondfully.com from the email address on your account, with the subject "Delete my account". If you used Sign in with Apple and chose Hide My Email, tell us the relay address Apple created for Fondfully. On iPhone, you'll find it in the Settings app: tap your name, then Sign-In & Security, then Sign in with Apple, then Fondfully.

We'll check that the request comes from the account holder, usually by email to the address on the account. We'll never ask for your password, vault passphrase or recovery code. Once we've confirmed it, we'll delete your account within 24 hours, and in any case within 30 days of your request. You can ask us, in the same email, to delete the emails you've sent to our addresses too (see section 5).

We can't delete the vault in your iCloud or Google Drive for you, because we have no access to it. Section 4 explains how to delete it yourself.

4. What's deleted, and when

From our servers, within 24 hours:

• your account: email address, name, password and sign-in methods, with Fondfully's access to your Apple sign-in ended if you used Apple (if Apple can't be reached, we keep only the encrypted Apple token, for up to 30 days, to try again);
• your signed-in devices and sessions, and any verification codes or reset links;
• your plan, purchase records (including prices), records of the billing emails we sent you, redeemed codes, and any Plus or notes our team added to your account (except the automatic renewal record in section 5);
• your support conversations, problem reports, suggestions and screenshots from the app, including messages sent from your account's email address; and
• the gift briefs you shared and every claim on them. Their links stop working.

From our backups, within 30 days. Our database backups are replaced on a rolling 30-day cycle.

Your vault, only if you choose:

• In the app, you can choose to delete your vault from your iCloud or Google Drive, and from the phone you're using.
• On any other device, delete the Fondfully app to remove the vault stored there.
• To delete the vault from iCloud yourself: in the iPhone Settings app, tap your name, then iCloud, then Manage Account Storage (or Storage), choose Fondfully if it's listed, and delete its data.
• Your phone's own backups, such as iCloud Backup, don't include your vault: Fondfully keeps it out of them.
• To delete the vault from Google Drive yourself: on a computer, open drive.google.com, click the gear, then Settings, then Manage apps. Find Fondfully, click Options, then Delete hidden app data.

5. What isn't deleted automatically

• Subscriptions. Apple or Google keeps billing until you cancel. On iPhone: Settings app › your name › Subscriptions › Fondfully › Cancel Subscription, or visit apps.apple.com/account/subscriptions. On Android: Google Play Store › profile icon › Payments & subscriptions › Subscriptions › Fondfully › Cancel subscription, or visit play.google.com/store/account/subscriptions.
• Store records. Apple and Google keep their own records of your purchases, under their privacy policies.
• Your vault, unless you chose to delete it, as described above.
• Emails you sent to our addresses, such as support@fondfully.com. They're in our team's email inbox, not on our servers, and we keep them for up to two years after the conversation ends. To have them deleted now, reply to your deletion confirmation email or write to privacy@fondfully.com, and we'll delete them within 30 days.
• Information that isn't linked to you: anonymous diagnostics and usage statistics, which are stored without your account and deleted within 90 days, and totals without identifiers.
• Short-lived records: our servers' technical logs, kept for 7 days, which can include your account number or email address if our team looked up your account (for example, to handle a deletion request by email); Cloudflare's sampled security records, which can include your IP address, kept for up to 31 days; and email records, including of the confirmation we send you: ours keep your address only as a one-way hash, for 30 days, and Cloudflare's email service keeps your address and the subject line for up to 31 days.
• Apple's purchase notifications, which identify a purchase only by Apple's transaction number and are deleted after 180 days.
• A record of your agreement to automatic renewal, if you subscribed to Plus Yearly: the store, the store's transaction references, the product, whether it was a test purchase, when you agreed, your app version and build, the version of the Subscription Terms and when the subscription ends, with no email address or name. California law requires us to keep it for at least three years, or one year after your subscription ends if that's later; then we delete it. Apple's purchase notifications can still update when an App Store subscription ends, which sets that period.
• Our team's audit log, which records actions staff took on accounts (such as granting Plus), referring to your account only by an internal number that's no longer connected to you. Details such as notes or reasons are removed when your account is deleted, and audit entries are deleted after two years.
• A record of the deletion, kept for three years so we can show we honored it. It contains only a one-way code derived from your account's internal number, who asked for it and when; no email address, name or other details.
• Links you sent. Messages containing gift brief links stay wherever you sent them, but the links stop working.

6. Questions

Email privacy@fondfully.com. Our Privacy Policy explains how we handle personal information, and our Data Processing Summary lists every retention period.