← Home

Delete your Anyvoc account

You can delete your Anyvoc account and the associated data at any time. The fastest path is from inside the app; if that is not possible, you can request deletion by email.

1. Preferred path: in the app

Open Anyvoc on your device.
Go to Settings.
Choose Delete Account and confirm.

This irrevocably removes your local vocabulary database on that device and your authentication record at Supabase in the same step. No further action is required.

2. If you cannot access the app

Send an email to feedback@anyvoc.eu with the subject "Account Deletion Request". To let us locate your account, include in the email body:

The email address you used to sign in. For "Sign in with Apple" users this is typically the pseudonymous @privaterelay.appleid.com address Apple assigned.
Optionally: the platform you signed in from (iOS or Android).

Identity check: to protect your account from deletion requests by third parties, please send the request from the sign-in address itself. If you cannot, we will send a confirmation email to the registered address and delete only after you confirm (Art. 12 (6) GDPR).

We confirm receipt within a few business days and complete the deletion within 30 days at the latest, in line with Art. 17 GDPR.

3. What is deleted — scope per path

Vocabulary, learning content, and review history live entirely on your device in a local SQLite database. Account data (authentication, sign-in identity) lives on Supabase. Each path therefore has a different scope:

In-app flow (Settings → Delete Account): Removes the local SQLite database on that device (vocabulary, content, progress, settings) and deletes your authentication record at Supabase in the same step.
Web / email request: Deletes only the Supabase authentication record server-side (user ID, email or Apple pseudonym address, sign-in timestamps, refresh and access tokens). It does not reach the local database on your device. To erase local content, also use the in-app flow or simply uninstall the app on each device.

4. What is retained, and why

After deletion we ourselves retain no personal data linked to your account. The account record is deleted immediately; residual copies in the sign-in processor's routine database backups and authentication logs expire automatically within that processor's standard retention window. Beyond that, two kinds of log data that are not linked to your account exist independently of it and are therefore unaffected by a deletion:

Our LLM backend proxy writes one structured log entry per request containing only the fields at, tier, model, and provider — no content, no IP address, no user ID, no headers. These entries carry nothing that could be linked to your account or device, so there is no account-specific data in them to delete or retain.
Host-level technical logs (IP address, timestamp, HTTP status) are produced by our hosting providers, as is normal for any web service. These are deleted automatically according to each host's own retention policy; the period is set by the host, not by us, and we neither download nor analyse these logs.

Which processor stores what, and on what legal basis, is set out in full in the privacy policy (sections 5–7).

5. Swiss residents (FADP)

If you reside in Switzerland, the Swiss Federal Act on Data Protection (FADP / DSG, in force since 1 September 2023) grants you equivalent rights — in particular the right to information (Art. 25 FADP) and the right to erasure (Art. 32 FADP). You may exercise these rights via the same email channel above. The competent supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC / EDÖB).