Your data

Delete your account

Deleting removes your Convertlix account and everything personal attached to it, including the record of how you have used the app. It is a real deletion, not a flag, and it cannot be undone.

Two ways to do it

The first is instant and needs nothing from us. The second exists for anyone who no longer has the phone, or who has already uninstalled the app.

In the app — immediate

Open Settings → Account → Delete account and confirm. You are already signed in, so there is nothing to verify and nobody to wait for. By the time the confirmation appears, the records are gone.

By email — within one month

Write to us from the address your account uses. We normally act within two business days and always within the one month data-protection law allows.

Email a deletion request

This cannot be undone

There is no recovery window and no archived copy to restore from. If you have paid for Premium, deleting the account gives up the entitlement attached to it — so if you only want to stop a recurring charge, cancel the subscription instead and keep the account. Deleting an account does not by itself stop a payment set up at a payment provider, so if a subscription is running, say so in your message and we will make sure both are dealt with.

What is erased

All of it happens inside the same database transaction as the account deletion — not on a nightly sweep, not “within 30 days”. Either every line below succeeds together or none of it does.

Your account: The account record itself, your display name, the encrypted copy of your email address and the keyed hash used to look it up. Your account at Clerk — our sign-in provider, which holds your email address and your password — is deleted at the same time.
Your devices and licences: Every device linked to the account, the link history between them, and the licence and seat records attached.
Your usage history: The per-tool, per-day and per-month conversion counts we hold to enforce the free monthly allowance.
Your analytics trail — including the part recorded before you signed in: Every event we hold about how you used the app, the per-sitting and per-day rollups built from them, the record of each installation, and the link between an installation and your account. This is the part most services quietly skip: events recorded on your devices before you ever signed in carry no account reference, so a deletion that only matched on your account would leave the whole pre-sign-in history behind. We recover the installation identifiers from that link first, then delete by both.
Anything still in transit: The app sends analytics in batches, so a batch can be queued before you delete and arrive minutes afterwards. We record a permanent marker at the moment of deletion and the server checks it before writing anything, so a late batch is discarded rather than quietly re-creating you.

Crash reports are held by Sentry, our crash-reporting provider, and expire on their own 90-day schedule. They carry our internal account reference rather than your email address. If you want them removed sooner than that, say so in your request and we will do it.

What is kept, and why

Three things survive. We would rather list them here than let you discover them later.

Aggregate counts: How many conversions of a given kind ran on a given day, in a given country, on a given app version — and the sizes of anonymous cohorts. These carry no identifier at all: there is no account column and no installation column in them to be blanked out, which is exactly what makes deleting the underlying records final rather than cosmetic. Your contribution is a number that went up by one and cannot be reversed back out. There is nothing in them to erase.
Purchase and tax records: If you ever paid us, tax law requires us to keep the transaction record — typically for seven years. It holds a payment reference, an amount, a currency, a country and a status. It holds no readable email address and no device identifier.
A suppression marker: One small permanent row holding a pseudonymous identifier and a date, and nothing else. It is what tells our servers to discard anything that arrives for you afterwards. It has to outlive everything else on this page: a marker that expired would quietly start collecting again months later, which is the opposite of what you asked for. It names nobody — after erasure there is no account behind the identifier it holds.

What deleting does not touch

Your files. Every document you have converted is on your phone, where it has always been. We never had a copy — there is no upload endpoint — so there is nothing on our side to remove and nothing of yours to lose by deleting.
The app itself. It keeps working as an installed app, but the compulsory sign-in wall returns and no tool is reachable until you sign in with an account again. Deleting your account is not uninstalling.
Your conversion history inside the app. That list lives in a database on your handset. Clear it in the app, or uninstall.

You may not need to delete anything

If what you actually want is for us to stop recording how you use the app, you can ask for that on its own and keep your account, your allowance and your purchase. It costs you nothing — every feature carries on working exactly as before. See section 8.1 of the Privacy Policy, or write to contact@convertlix.com with OBJECT TO ANALYTICS as the subject.

Questions before you do it

Ask first — a deletion cannot be walked back, and we would rather answer a question than undo something we cannot undo. Write to contact@convertlix.com. The Privacy Policy sets out everything we hold and why we hold it.