The simplest way: from the app
If you have the app, open Settings → Delete my account. The screen shows what will happen project by project before you confirm. After successful confirmation, access is cut off and active Suivaya data is deleted or made inaccessible with no recovery period.
What gets deleted
- Your Firebase account, email/sign-in association, and Suivaya profile.
- Projects where you are the sole member, with their categories and entries.
- Every invitation that identifies you as its creator or as the account that accepted it, pending or already used.
- Safety reports you submitted, reports whose reported-account field identifies you, and block records involving your account.
- Legacy profile or internal records still attached to your account.
A server-only deletion lock prevents an offline device or concurrent callback from recreating data during deletion. It contains only the former Firebase UID as its document key, a deletion state, and timestamps — no email, profile, project, expense, receipt, or advertising data. After a successful deletion it remains for 24 hours to cover previously issued sign-in tokens, then is queued for automatic deletion. If the final authentication step fails after cloud-data cleanup, it may remain for up to 7 days so the request can be retried safely.
There is no Suivaya recovery grace period. Firebase Authentication may retain IP logs for a few weeks and deletes other authentication data from its active systems and backups within at most 180 days.
What survives in a shared project
If other people belong to a project, the project and its financial history remain for those members. Ownership transfers when required; your membership is removed; and entries you recorded are re-attributed to “a former member” so your name is no longer shown while shared totals stay accurate.
Important for Apple subscribers
Deleting a Suivaya account does not cancel an Apple auto-renewable subscription. Cancel it separately in your App Store subscription settings. We delete or make inaccessible the active Firebase UID and profile, subject to the Firebase Authentication retention period above. For up to 400 days, we may retain a pseudonymous StoreKit transaction link, product identifier, current billing-period boundaries and number of scans already used, plus the active quota window for Apple Sandbox testing. This lets a verified active purchase be restored without resetting paid quotas. The record contains no Firebase UID, email, profile, project, expense or receipt-image data and is deleted once claimed or when its retention period expires.
Manual request
We verify the request against the account email, process it under the same rules above, and confirm when deletion is complete.