Updated: 5 November 2026
Deleting an account is permanent. Deleting the app alone does not delete your account or cancel a subscription.
This removes active account records and requests removal of stored images. It covers your email/profile, avatar, uploaded photos and generated image sizes, notes, trackers, factors and logs, saved AI analyses, entitlement records and sessions.
File removal and deletion of records held by providers are separate steps. The in-app confirmation covers account removal; it does not separately confirm erasure of every stored file or provider copy. Storage cleanup may finish later or require an error to be resolved. Contact us to check retained copies and obtain confirmation of the outcome.
Email morphtrack.app@gmail.com with the subject Delete my account. Include the email associated with your account and whether you want the entire account or particular data deleted. You do not need to reinstall the app, create an account or pay.
If possible, write from your account email. We verify control of the account/email, not just the displayed sender address. If you used Apple’s Hide My Email or cannot access your account, tell us; we will use a proportionate alternative verification method. Do not send your password, medical records or identity documents unless specifically needed through an appropriate secure process.
After verification, we explain the scope, handle deletion and confirm the outcome, including any lawful exceptions. We do not require you to cancel your subscription before submitting a deletion request.
An existing AI analysis can still contain observations or context derived from a deleted photo, note or factor. Changing “share with AI” affects future submissions. Delete the related analysis too, or request deletion of all associated data. Tell us if your request includes health data and derived observations; it need not be limited to an entire account.
We act without undue delay. For requests governed by GDPR, the response period is one month; a permitted extension is explained within that month. Applicable US health-data periods differ: Washington ordinarily requires a response within 45 days of receipt; Nevada requires deletion and recipient notification within 30 days of authentication. See the Health Data Policy for response and appeal details.
A response deadline is not a blanket licence to keep data until that date. We instruct relevant processors/recipients where required. Our central application logs have a configured 30-day retention period. Providers may retain restricted security or legally required records; we explain relevant exceptions. We do not promise a universal backup period or instant removal of every copy.
If backup copies are retained under a lawful exception, their use must be restricted and deletions reapplied before restored data returns to ordinary service. Files you exported, screenshots, your device backups and copies you shared elsewhere are outside our account-deletion process. Apple/Google may retain their own purchase records under their policies.
Encrypted database backups are configured for 30 days. Private encrypted deletion-recovery journal exports in DigitalOcean Spaces, and exports produced by GitHub recovery jobs, are configured for 90 days. Recovery receipts cover withdrawals of journal, AI and statistics permission so restoring a backup does not reinstate those permissions. The live recovery journal retains limited object/event identifiers, types and deletion/withdrawal times, without journal text, photos or email, and currently has no automatic expiry. It is kept to prevent deleted data or withdrawn permissions returning from backups, with retention reviewed for that purpose. Account deletion does not instantly remove these recovery records or existing security logs. They are restricted residual records, not a copy of your usable account. See the Privacy Policy for retention and the limits of automatic cleanup.
Manage cancellation in Apple subscriptions or Google Play subscriptions. The store can continue billing after account deletion if renewal remains enabled.
Contact morphtrack.app@gmail.com for status or to clarify a request. If we refuse it, we explain why. Reply with Privacy appeal for review; the Health Data Policy explains the appeal process and complaint channels.
Privacy Policy · Health data policy · Terms
Mobile diagnostic events do not carry your account identifier. Deleting an account does not immediately remove these limited records: pending local events expire within seven days, and central logs have a configured 30-day retention. Network/security records may follow the exceptions described in the Privacy Policy.