Deleting your NouriMe account — DRAFT

Status   DRAFT. TBD_LEGAL for wording; the mechanism itself is implemented.
Purpose  Both app stores require a deletion path that is reachable WITHOUT the
         app, so this page has to exist at a stable public URL.

From inside the app

Open Profile.
Under Account, choose Delete account.
Confirm.

This permanently removes:

your account record and everything stored under it on our servers,
your sign-in identity, so the email can no longer sign in,
any usage-measurement rows associated with the account,
and then the diary, streak, profile and settings stored on this phone.

It cannot be undone. We keep a minimal record that a deletion happened — the account identifier and the date — and nothing that identifies you.

The order is deliberate: the server is cleared first. If that call fails you still have both your account and your data, whereas wiping the phone first would destroy your only copy on the way to an error.

Without the app

TBD_EXTERNAL — a web form or a monitored email address. One of these must exist before submission; a deletion path that requires the app is not sufficient for either store.

Whichever is chosen must:

verify that the requester controls the account, and
complete the same deletion as the in-app control, not a flag.

What we keep, and why

account identifier + deletion date    so a repeated request is answerable, and
                                      so the deletion itself stays on record
admin audit entries                   if staff performed the deletion, that
                                      action stays in the append-only log

Neither carries a name, an email, or anything health-related.