Delete Your Verafy Account & Data

Effective: April 6, 2026 | The New Atlantis Corporation | Contact: legal@getverafy.app

This page explains how to request deletion of your Verafy account and the personal data associated with it. It applies to users on iOS, Android, and the web app, and is provided in compliance with the Google Play Data Safety requirements, the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and other applicable privacy laws.

1. What you can request

You may request either:

Full account deletion — your Verafy account and all personal data associated with it are permanently deleted, or
Partial data deletion — specific categories of personal data are deleted while your account remains active (for example, scan history only).

Both options are free of charge and do not require you to provide a reason.

2. How to request deletion

Option A — By email (recommended)

Email legal@getverafy.app from the email address associated with your Verafy account with the subject line:

Delete My Verafy Account — for full account deletion, or
Delete My Verafy Data — for partial data deletion (please specify what you want deleted, e.g., "scan history only").

We will respond within 5 business days to confirm receipt and verify your identity, and complete the deletion within 30 days of verification (or sooner where required by law).

Option B — Web form

Visit https://getverafy.app/delete-account/request and complete the deletion request form. This route is available even if you do not have the app installed.

Note: An in-app deletion option is being added in our next release. Until then, please use one of the options above. Both routes are equally fast and reach the same compliance team.

3. What data is deleted

When you request full account deletion, the following personal data is permanently deleted from our production systems:

Account profile (name, email address, password hash, account creation date)
Health Assessment responses (allergens, dietary restrictions, sensitivities, household members)
Personal scan history (every barcode you have scanned and the timestamp)
Personalized product recommendations and Safe Swap history
Family plan member profiles (if you are the account owner)
Subscription and billing identifiers stored by Verafy (note: payment processing is handled by Apple, Google, and RevenueCat — see Section 5)
Push notification tokens
Support correspondence linked to your account

For partial deletion, only the categories you specify are deleted; the rest of your account remains intact.

4. What data may be retained, and for how long

We may retain a limited subset of data after deletion only where retention is required by law or necessary for legitimate, narrowly-scoped purposes. Specifically:

Data	Retention	Reason
Anonymized, aggregated scan counts (no user identifier)	Indefinite	Product database quality metrics — cannot be re-linked to you
Financial transaction records (invoice ID, amount, date)	7 years	Tax, accounting, and audit obligations under U.S. and EU law
Account deletion log entry (date of deletion only)	3 years	Proof of compliance with deletion requests
Backups containing your data	Up to 35 days	Encrypted backups are overwritten on a rolling 35-day cycle

After these retention periods expire, the corresponding records are deleted automatically. No retained data can be used to re-identify you or restore your account.

5. Third-party processors

Verafy uses third-party services to operate the app. When you request deletion, we instruct these processors to delete your data on our behalf:

RevenueCat (subscription management) — receives a delete request via API
Apple App Store / Google Play (in-app purchases) — payment records are governed by their own privacy policies; we do not control or store your payment card details
Hostinger (database hosting) — data is deleted from our production database hosted on their infrastructure
Cloudflare (content delivery) — request logs are retained per Cloudflare's standard retention (currently 4 hours for raw logs)

We do not sell your personal data to any third party.

6. Timeline

Step	Maximum time
Acknowledge your request	5 business days
Verify your identity	5 business days after acknowledgement
Complete deletion in production systems	30 days from verification
Purge from rolling backups	Up to 35 additional days
Deletion confirmation email	Within 24 hours of completion

If you do not hear from us within these timelines, please re-send your request to legal@getverafy.app and CC support@getverafy.app.

7. Your rights

In addition to deletion, depending on your jurisdiction you may have the right to:

Access the personal data we hold about you (Pro and Family subscribers can also use Export My Data in-app)
Correct inaccurate personal data
Restrict or object to certain processing
Lodge a complaint with your local data protection authority (e.g., the ICO in the UK, your state Attorney General in the U.S., or the supervisory authority in your EU member state)

To exercise any of these rights, contact legal@getverafy.app.

8. Children

Verafy is not directed to children under 13 (or under 16 in the EU/UK). If you believe a child has created an account, contact legal@getverafy.app and we will delete the account and associated data without requiring identity verification beyond confirming the account exists.

9. Questions

For any questions about this deletion process, contact:

The New Atlantis Corporation
Attn: Privacy / Data Subject Requests
Email: legal@getverafy.app
Web: https://getverafy.app/privacy

This page is published to satisfy Google Play's Data Safety requirements (Account deletion link) and Apple App Store guideline 5.1.1(v). It is reviewed at least annually and whenever our data practices change.