Delete your Bellyful account

How to ask

1. Email privacy@bellyful.app with the subject "Delete my account". Include the email address or phone number on your account.
2. We send a confirmation to the email address on that account. If your account has no email address, write to privacy@bellyful.app from any address and we'll verify you another way.
3. Reply to confirm. We don't delete anything until you do.
4. We tell you when it's finished.

If you still have the app, you can also go to Profile > Delete account.

How long it takes

Within 30 days of your confirming reply.

What we delete or clear

• Your name, email, phone number, and Google and Apple sign-in links
• Your sign-in sessions and push notification tokens
• Your preferences, family members, and feedback
• Your dietary details and notes on events
• The location and your notes on events you hosted
• The text of messages you sent, shown as "Message deleted"
• Activity entries about you. Where another person's entry records you as a removed guest or as an item's previous or new assignee, your name becomes "Deleted user"
• Your attendance and assignments on other hosts' upcoming events

What happens to your events

Your upcoming events are cancelled, and guests who hadn't declined get a cancellation email if we have their email address.

What we keep

• An anonymized account record with no name or contact details
• The names, themes, event types, and occasions of events you hosted, and the names, descriptions, dietary labels, and shopping lists of their items, because past guests' history uses them. An event name can identify you if you put your name in it
• Your past attendance and assignments on other hosts' events, linked to the anonymized record
• The change history of items, supplies, and tasks you edited, including their names and descriptions, linked to the anonymized record
• App usage, AI usage, and menu feedback records, with your account link and identifying details removed. AI usage and menu feedback records about events you hosted stay linked to those events
• Records of SMS consent, including the phone number, without your account link
• Opt-out lists, so a number or address that opted out stays opted out
• Your AI data choices, linked to the anonymized record
• Reports you filed and reports about you, linked to the anonymized record
• Records of our requests to delete any analytics data held about you, with no name or contact details
• A sign-in security record, with no name or contact details, that keeps your old sign-ins from working
• The region and time zone of the device you created each hosted event on
• Records of notifications we sent you, with the recipient address and subject removed

Logs and backups

Server logs expire within 30 days. Encrypted database backups expire within 14 days.

Analytics and crash reports

Product analytics are switched off today. Crash reports carry no account ID, so we can't find or delete them by person.

For more, see our Privacy Policy.