# Delete your account

{/*
  The mailbox is written once, here, and every mention on the page reads it.
  It is the address the privacy policy names for requests (Section 9.3); keep
  the two the same.
*/}

export const MAILBOX = "info@vploq.com";

This page is for the **vploq** app (and its test version, **vploq β**) on
Google Play, the App Store and the vploq apps for macOS and Windows. The
developer is **InTallyCon Development - FZCO**.

You can ask us to delete your vploq account and the personal data that goes
with it without installing the app.

## Ask us by email

1. Send an email **from the address you sign in to vploq with** to
   <a href={`mailto:${MAILBOX}?subject=Delete%20my%20account`}>{MAILBOX}</a>.
2. Use the subject **Delete my account**. If the account is in vploq β, say so.
3. We reply to that same address and ask you to confirm. We only act on a
   request that comes from the address the account uses, so nobody else can
   delete your account by asking for it.

We respond within one month of receiving your email. For complex or numerous
requests this can be extended by up to two further months; if it is, we tell
you within the first month, as the
[privacy policy](/privacy#93-requests) describes.

If you can no longer reach the address the account uses, we cannot delete the
account on an email request. Sign in to the app if you still can and delete it
there.

## Or delete it in the app

If you still have the app, this is faster. Go to **Profile → My information →
Delete account**, press and hold for five seconds, then confirm. The deletion
starts straight away. [Your data](/account/your-data#delete-your-account)
describes the steps.

## Before you ask

**A team you own.** An account that owns a team with other people in it cannot
be deleted. Transfer the team to someone else or disband it first. See
[teams](/teams/managing-teams#ownership). A team where you are the only
member is deleted with your account.

**Subscriptions.** What happens depends on where you pay:

- **Whop:** the subscription is cancelled with the account. It does not renew,
  and the period you have already paid for is not cut short.
- **Google Play:** we stop the subscription renewing.
- **App Store:** we cannot cancel it for you. Cancel it yourself in your Apple
  account settings (Settings → your name → Subscriptions), or Apple keeps
  charging you after the account is gone.

## What is deleted

As soon as the deletion is carried out:

- the account is deactivated and you are signed out everywhere;
- devices you own are released, so their next owner can set them up, and their
  certificates are revoked;
- personal data on device records and activity records is removed (names,
  addresses, IP addresses, location data);
- push-notification tokens and any data-export archives are deleted.

When the deletion is done, vploq sends a confirmation to the account's email
address. That email contains no links. An email about deleting your vploq
account that asks you to click a link is not from us: do not click it.

After a **30-day grace period** whatever is left of the account, including your
email address and name, is erased for good, together with your sign-in
identity at our authentication provider. The grace period exists only to undo a
deletion made by mistake: signing in to vploq again during it cancels the
deletion.

## What is kept, and for how long

- **Backups.** Database backups expire automatically after at most 35 days.
  Your data can remain in an encrypted backup until it does. Backups are never
  used to bring a deleted account back.
- **Infrastructure logs** are not edited after the fact. They expire on their
  own schedule, after 14 to 30 days.
- **Connection records** kept for setting up connections expire on their own
  after one hour to seven days.
- **Error reports** are kept by our error-monitoring provider for 90 days.
- **Device diagnostics**, sent by a hardware device when a firmware update
  fails, are kept for 30 days.
- **Invitations** sent to your email address are deleted 90 days after they
  expire.
- **Team and administrative activity logs** expire 90 days after the entry in
  our database, or 30 days after it was moved to the archive. Your email address
  is replaced in team activity entries still in the database. Archived entries
  cannot be changed, and some entries keep a truncated IP address, a browser or
  app identifier or, where support looked you up by email, that address.
- **Security records** are kept: the record that a device's certificate was
  revoked, and a record that the deletion took place. Neither contains your
  email address. Device activation records keep only the device's serial
  number and certificate fingerprint, and expire after 90 days.

The [privacy policy](/privacy#7-retention-and-deletion) gives the full detail
and the retention period of every category.