Delete your account

On iOS and Android:

1. Open the Memorion app
2. Sign in with your account
3. Tap the Settings tab
4. Scroll down to the Danger zone section
5. Tap Delete account
6. Confirm twice — the app asks a second time, and the second prompt is the one that does it

On the website, the same option lives in Settings: you confirm once, then type DELETE when asked. Typing anything else cancels.

There is no waiting period and no recovery window. When the second confirmation goes through, the deletion described below has already happened.

Send an email to [email protected] from the address registered with your Memorion account, with the subject:

We will verify your identity and complete the deletion within 30 days. We may ask follow-up questions to confirm the request comes from the account owner. Email is also the way to ask for the extra erasures listed in section 4 below, which the in-app button does not perform.

The moment you confirm, we:

• Delete your account row — name, email address, password hash, the address of your profile picture, your date of birth and the ages stored with it, your subscription identifiers and your push notification token
• Delete your game history — every session, every score, your best scores, your daily play counters and your in-app settings
• Delete the record of your generated portrait
• Strip your onboarding record — the record the app writes as you answer the questionnaire, before any account exists. Your name, your date of birth, the age band derived from it, your questionnaire answers and the links to your account and to your email lead are all removed from it, both from the record tied to your account and from one tied only to the email lead we hold for you. What survives is an anonymous row saying that someone reached a given screen, on a given platform, on a given day
• Strip your contact details out of the RevenueCat events — the email address, display name and phone number RevenueCat attaches to each subscription event are removed from our copies of them
• Remove your email address from the sign-up fraud log described in section 4

That last point goes further than our normal retention rule, which erases the identity on an onboarding record after 90 days but keeps the answers for statistics. Asking to be deleted erases the answers too: a request to be forgotten is not a request to be counted.

Stated plainly, so that nothing here is a surprise later. This list is meant to be complete — if you find something on our side that is not on it, write to us and we will fix both the product and this page.

• The email lead, if you typed your email address into the onboarding. It keeps that address, your name and the answers you had given at that point, because it is also the record of a commercial transaction
• The image files themselves. Deleting the account removes the addresses that point at your profile picture and your portrait, but the files stay in our object storage until we remove them by hand
• The subscription events themselves, from Stripe, RevenueCat and Paywallo. We keep each one as the provider sent it, because it is the accounting record of a payment. The RevenueCat ones lose your contact details, as listed in section 3; the Stripe ones still carry the name and email address you typed at checkout, buried in the invoice object at a path that differs from one event type to the next — cutting that out blindly would risk the accounting record, so we do it by hand when you ask. Deletion on its own cuts the link to your account, not the event
• The sign-up fraud log. Every attempt to create an account — yours included — writes one line holding the IP address, the browser or device user-agent and the email address typed into the form. Deleting your account removes the email address from those lines; the IP address and the outcome stay, because the sign-up rate limit counts by IP address and a log an attacker can wipe by deleting the account they just made is not a defense. Every line is deleted 90 days after it was written
• Copies already sent to third parties — Paywallo, Meta, RevenueCat, Stripe, and OpenAI for the photo used to draw your portrait. What they keep is governed by their own retention rules

Write to [email protected] and we will erase the lead record and the image files, strip your email address and name out of the stored billing events, and pass the deletion request on to those providers.

What we will not tell you is that everything left behind is anonymous. Most of what is listed above can still be tied back to you by someone holding the right query, which is exactly why it is listed here instead of being described as "aggregated statistics".