Deleting your account and data

You can delete everything yourself, inside the app. No request to make and no answer to wait for.

From the app

1. Open the Settings tab.
2. Tap Account.
3. Tap Delete account and data, then confirm.

If you have Apple sign-in linked, the app will ask you to confirm it once more. That is not a formality: it is the only way Apple gives us permission to revoke the access, and without it CosmoYum would stay on your list of sign-ins forever.

Deletion is immediate and final — we keep no copy of it and have nothing to restore it from. The app itself stays on the phone and starts from scratch, as if freshly installed; what is left on the device is listed below.

What is deleted

• your diary: every record, dish name, weight, nutrient, day and meal, along with the corrections you made to the estimates;
• your profile: sex, date of birth, height, weight, goal, activity level and the allergens you asked to be warned about;
• your calorie and macronutrient goals with their history, and your weight log;
• your saved favorites and the names of your meal containers;
• products read from the labels you photographed;
• your recognition counter and our copy of your subscription status;
• the account itself: the anonymous identifier and any Apple or Google sign-in attached to it.

What stays — and why

• Your Premium subscription. It belongs to your Apple ID, not to the account, so deleting the account does not cancel it: Apple keeps charging until you cancel it in iPhone Settings → your name → Subscriptions. The app reminds you of this when you confirm the deletion. RevenueCat, which checks subscriptions for us, keeps the purchase record under the anonymous identifier — after deletion it leads nowhere, and we can have it removed if you ask.
• Meal photos. The file was only ever kept on your phone — the cloud held the path to it, not the picture. Each photo was sent once to our server to be recognized and stored nowhere after the answer came back (see section 1 of the privacy policy). They go with the app, or delete them yourself.
• The app’s offline copy of your data. So the diary works without a signal, the app keeps a local cache of what it has already read. After deletion nothing can reach it — the fresh anonymous identifier does not match it, and our rules refuse the old one — and it goes with the app.
• On-device settings — your theme, language, and the fact that you accepted the policy. Not tied to the account and saying nothing about you; they go with the app.
• Server logs — a technical record of each handled request: the model, timings, sizes and lengths. They hold no meal content (see section 4 of the privacy policy). They expire on their own, currently within 30 days, and cannot be deleted selectively.

If you no longer have the app

Email privacy@cosmoyum.app.

One limitation, and it follows from not asking you to register: with no sign-in linked, your data belongs to an anonymous identifier that lives only on your phone — from an email we have no way of telling which data is yours. If Apple or Google sign-in is linked, give us the email address you signed in with and the account can be found.