Delete your account & data

Pamily is local-first: your family's data lives on your devices. If you use a paid cloud plan, what leaves the device is end-to-end encrypted — our servers (Family plan) or your own Google Drive/iCloud (Personal plan) only ever store ciphertext we cannot read.

Delete everything from inside the app

1. Family plan (account holders): open Settings → Sync & subscription, then under Account tap Delete account. This removes your household's encrypted data from our servers (if you own the family), removes you from the family roster, and permanently deletes your sign-in account (email + user id). No email, no waiting period. The app then offers to wipe this device's local data too. If deletion asks you to sign in again first, sign in once more and retry — recent sign-in is a security requirement for account deletion.
2. Personal plan: on the same screen, tap Delete cloud data. This erases every encrypted blob Pamily stored in your own Google Drive or iCloud, including the wrapped sync key.
3. This device: Settings → Wipe data on this device erases all local data, encryption keys, and exported backups. Uninstalling the app also removes all local data.

What is deleted, and when

• Account (Family plan): Firebase Authentication record (email, user id) — deleted immediately.
• Household sync data (Family plan): encrypted changelog blobs in Firestore and encrypted photo/PDF attachment blobs in Cloud Storage — deleted immediately when the owner deletes the household.
• Personal-plan sync data: stored only in your own Google Drive / iCloud account; deleted by the in-app action, or at any time by you directly in your storage provider.
• Anonymous diagnostics (opt-out Crashlytics / Analytics): retained by Firebase for up to ~14 months, not linked to your account, and stop being collected the moment you turn them off or delete the app.

Can't access the app?

Email dev.puhgeh@gmail.com from the address you signed up with and we'll delete your account and household data within 30 days.