Deletion request form
Submitting this opens an email to our privacy team with your details filled in, send it and we'll take it from there. Prefer to write yourself? Email [email protected] with the subject "Account deletion request".
What gets deleted
When you delete your account, we erase the following from our systems:
- Your profile and sign-in details, including your name, username and email address.
- Your scan history.
- Your starred products and ingredients.
- Your active sessions, so you're signed out everywhere.
- Anything you sent us that we haven't accepted into the catalogue: pending and rejected product submissions, barcode and photo contributions, and photo reports.
If you used Decify as a guest
If you never created an account, there's nothing of yours to delete: we don't store stars, history or searches for guests. Your anonymous guest ID, and any photo report linked to it, is deleted automatically after 90 days without activity. Because a guest ID isn't linked to any contact details, we usually can't identify a particular guest's data from an emailed request.
What we keep, and why
| Retained | Why | How long |
|---|---|---|
| Submissions we reviewed and accepted into the catalogue, such as a product photograph or barcode | Part of the shared catalogue; the link to your account is permanently removed, and the record holds no name, email address, username or account identifier | Indefinitely |
| Encrypted database backups | Automatic safety copies of the whole database | Up to 7 days, then deleted automatically |
| Records of the deletion request itself | Proof we honoured your request, if a regulator asks | Normally 24 months after the matter is closed |
| Data needed to establish or defend a legal claim, or to prevent fraud or abuse | Legal obligation or legitimate interest | Only as long as necessary |
How long it takes
- In-app deletion: your account is closed immediately and you're signed out on every device.
- Web request: we may ask you to confirm your identity, then respond within the time the law requires: one month in the UK, 20 working days in New Zealand.
- Backups: encrypted backups are deleted automatically, so a residual copy can remain for up to 7 days after your account is deleted.
You can also ask us for a copy of your data before deleting it, email [email protected] and we'll send a machine-readable export.