Delete Account

You have the right to delete your account and all stored personal data at any time (Art. 17 GDPR). This action is irreversible.

Delete in the app

1. Open LithoCanvas and sign in.
2. Go to Settings › Account and privacy › Privacy.
3. Tap „Delete Account“, enter your password and confirm with „Yes, delete now permanently“. If you sign in with Google, confirm with your Google account instead.

Delete without the app

No longer have the app? Write from the email address of your account to the address below, subject "LithoCanvas: Delete account". We delete the account and confirm it by email, within one month at the latest.

kontakt@senorit.de

What gets deleted

Deleting your account permanently removes the following data:

• Account data (email, display name, password hash or Google account ID)
• All photos, your profile photo and voice notes in the operator's file storage
• All identification results (minerals and artworks)
• Achievement progress, points, and rewards
• Wishlist and custom nicknames
• Purchase data (purchase token, plan, status) and consent records
• All session and log data linked to the account
• Local device data (SQLite database, app storage)

What stays

We keep data only as long as the purpose requires:

• Account, entries, photos, profile photo, voice notes, progress, wishlist: while the account exists. A removed or replaced profile photo is deleted immediately
• Deleted entries: when you delete an entry, we immediately remove its details, notes and nickname, and its photos and voice notes, from our servers. Only a deletion marker without content (an ID and a time) remains, so that your other devices remove the entry too. This marker stays until you delete your account. For a wishlist entry the marker still holds the stone's name and we delete it after 30 days. Results of earlier identifications (name, properties) stay stored until you delete your account, for your progress and to avoid repeated analyses, with no link to an entry or photo
• Consent records: while the account exists
• Consent to immediate start when buying a pack (wording version, time): while the account exists
• Purchase data (encrypted purchase token, product, plan, status, expiry date, order ID): while the account exists, so that we can check your plan. Technical notifications from Google Play (only an ID and a time, no account reference): 30 days
• Sessions: 30 days from sign-in, immediately on sign-out. At most the 10 newest sessions per account are kept; each new sign-in ends the older ones. We delete expired sessions automatically
• Request-limiting counters (including the IP hash value): only for the relevant window of 1 minute to 24 hours, then deleted automatically
• Buffer for running image analyses: about 1 day
• Uploaded photos and voice notes not linked to an entry: deleted after 1 day
• Security events: 90 days
• Technical operating logs at Cloudflare (a sample of about 10 % of requests, without photos or notes): at most 7 days
• Database backups at Cloudflare (restore points, “Time Travel”): at most 30 days, which is how far back they reach according to Cloudflare. What we have deleted (entries, a whole account, expired hashes) may remain in these backups until then, after which it is gone for good. The backups exist only at Cloudflare, and photos and voice notes are not part of them and are not restored except to repair data loss
• Account deletion: your access is blocked immediately and all sessions end. Account, entries, files (photos, profile photo, voice notes) and purchase data are then deleted, usually at once, otherwise in the automatic maintenance run that runs every 10 minutes and retries failures. This does not cancel a Google Play subscription
• Data on your device (collection, photos, voice notes, settings): it stays on the device after you sign out so that you can sign in again. It is deleted when you delete your account, clear the app data or uninstall the app. The app does not encrypt it itself; your device's protection applies (screen lock, device encryption).
• Confirmation code: it works for 10 minutes. The hash of an expired code is deleted by the automatic maintenance run, which runs every 10 minutes, so it can stay stored for up to about 20 minutes
• Emails not yet delivered: until they are sent, at most one day
• Hashes protecting the free identifications (formed with a secret key): 365 days (12 months) for email address and Google account, 30 days for the internet connection, also after an account deletion (Section 4.11)
• Declarations of cancellation or withdrawal, also from the form without signing in (type, contract, time of receipt, name, reason, desired end): until you delete your account, at most until three years after the end of the year in which the declaration arrived (Section 4.13). We do not store a cancellation without signing in that cannot be matched to an account with a running subscription in the app database
• Notice emails to the operator (a termination for good cause or an unmatched cancellation sent without signing in, a declaration Google Play did not carry out): in the controller's mailbox until the review is finished and we no longer need it
• Statutory retention duties (e.g. Sec. 147 AO and Sec. 257 HGB, 6 or 8 years depending on the document) remain unaffected. Invoices and payment records for subscriptions are kept by Google Play. We do not store invoices in the app database