Data Deletion Policy

Last updated: August 2026

How to delete your account

  • In the iOS app: Profile → Settings → Danger zone → Delete my account. Requires typed confirmation.
  • On the web: Sign in → Settings → Your data → Delete account.

Both paths perform the same server-side deletion. There is no "soft hide" — deletion is immediate and permanent.

What is deleted immediately

  • Your profile and display name (replaced with “Deleted User”).
  • All learning progress: lesson history, answers, mistakes, mastery records.
  • XP ledger entries, streaks, hearts, daily activity history.
  • Achievements, league memberships and weekly standings entries.
  • The paper-trading simulator portfolio: accounts, orders, runs and journal entries.
  • Notifications, active sessions on every device, pending auth tokens.
  • Apple/Google sign-in links for the account.

What is anonymized rather than deleted

  • Referral records that reference your account keep an opaque ID so other users' invite bonuses remain valid — your identity is removed.
  • Email address is replaced with an unrecoverable placeholder (deleted-…@deleted.local).

What we must retain briefly (legal/security)

  • Billing records held by Apple or Stripe under tax/accounting rules are retained by those processors per their own obligations; they contain no learning data. Subscriptions tied to a deleted account are cancelled at period end or refunded per platform policy.
  • Server security logs may retain minimal request metadata (IP-derived rate-limit keys) for up to 30 days for abuse prevention.

iOS subscription note

Deleting your Candleling account does not automatically cancel an Apple subscription. Cancel first in Settings → Apple ID → Subscriptions, then delete the account. Web subscriptions are cancelled as part of deletion if one exists at period end.

Questions

Data requests of any kind: tradequest@abobakerbuilds.com