Data Deletion Policy

Last updated: 27 September 2026

How to delete your account

• In the iOS app: Profile → Settings → Danger zone → Delete my account. Requires typed confirmation.
• On the web: Sign in → Settings → Your data → Delete account.

Both paths perform the same server-side deletion. There is no “soft hide” — deletion is immediate and permanent.

What is deleted immediately

• Your profile and display name (replaced with “Deleted User”).
• All learning progress: lesson history, answers, mistakes, mastery records.
• XP ledger entries, streaks, hearts, daily activity history.
• Achievements, league memberships and weekly standings entries.
• The paper-trading simulator portfolio: accounts, orders, runs and journal entries.
• Notifications, active sessions on every device, pending auth tokens.
• Apple/Google sign-in links for the account.

What is anonymized rather than deleted

• Referral records that reference your account keep an opaque ID so other users’ invite bonuses remain valid — your identity is removed.
• Email address is replaced with an unrecoverable placeholder (deleted-…@deleted.local).

What we must retain briefly (legal/security)

• Billing records held by Apple or Stripe under tax/accounting rules are retained by those processors per their own obligations; they contain no learning data. Subscriptions tied to a deleted account are cancelled at period end or refunded per platform policy.
• Server security logs may retain minimal request metadata (IP-derived rate-limit keys) for up to 30 days for abuse prevention.

iOS subscription note

Deleting your Candleling account does not automatically cancel an Apple subscription. Cancel first in Settings → Apple ID → Subscriptions, then delete the account. Web subscriptions are cancelled as part of deletion if one exists at period end.

Questions

Data requests of any kind: tradequest@abobakerbuilds.com