Delete your data

1. The journal on your phone: delete the app

Every entry, photo, taste tag, wishlist item and punchcard you have ever made in brewd is stored on your phone. Deleting the app deletes all of it, at once and for good. Unless you turned sync on, we hold no copy to restore it from, so if you want to keep any of it, save your photos first.

If you have never signed in and turned on sync, that is the whole job, and there is nothing to email us about. If you have, deleting the app leaves our copy alone, so do step 2 as well.

2. Your account, and anything you synced: delete it yourself

An account holds your email address, a name, a profile picture if the sign-in button you used gave us one, how you signed in, and the sessions keeping you signed in. If you signed in with Apple it also holds a token we use for one thing only: to tell Apple you are done with brewd, which we do when you remove Apple as a way to sign in, or when your account goes, whichever comes first. If you have brewd+ and turned on sync, it holds a copy of your journal too: your entries, your wishlist, the punchcards you have picked and how you styled them, and your photos.

The quickest way to be rid of all of it is inside the app: open Settings and tap delete your account, in the you card at the top. It runs as soon as you confirm, and it cannot be undone.

If the app is gone, or you cannot get into it, use theaccount deletion form instead. Give it the address on your account and we email you a link; deletion runs when you follow it and press the button there.

Either way we remove the account, how you signed in, its sessions, any unused sign-in code, the synced copy of your journal and the photos stored with it. You can also emailprivacy@getbrewd.app from the address on the account and have us do it, or ask us for a copy of everything beforehand. We reply within a few days, and always within 30.

3. The subscription record: email us your id

Separately from any account, we hold a small subscription record: an id for your install, whether you have brewd+, which store the purchase came from, the country your store account is registered in, and when we last saw you. No journal. To have it erased:

• 1. Open Settings in brewd. Tap the Settings tab, then find the you card at the top.
• 2. Copy your anonymous id. Tap the id (it looks like $RCAnonymousID:6f21…) and it is copied to your clipboard. Without an account it is the only thing that identifies you to us, so we need it to find the right record.
• 3. Email us. Send it to privacy@getbrewd.app and say you would like your data deleted. No particular wording is needed.
• 4. We delete it and confirm. We remove the record and reply to tell you it is done. We aim to do this within a few days, and always within 30.

Email privacy@getbrewd.app. You can also ask us for a copy of the record before deleting it, and we will send you everything we have.

4. The beta invite list: email us

If you put your address in the beta form on the front page, we hold that address and the date you gave it. Nothing else, and no journal. It is not a mailing list: the only thing it is ever used for is one invite when the beta opens, so there is no unsubscribe link, because there is nothing arriving to unsubscribe from.

Email privacy@getbrewd.app from the address you signed up with and ask us to take it off. We delete the row and reply to tell you it is done.

What gets deleted

• Your account: your email address, your name, your profile picture, the record of how you signed in, every session on it and any sign-in code still waiting to be used.
• Everything you synced: your entries and the cafés attached to them, your wishlist, the punchcards you picked and their styles, and your photos.
• The subscription record held against your id, and the entitlements attached to it.
• Your place on the beta invite list: the address and the date.
• Your customer record at RevenueCat, our subscription provider. We ask them to delete it at the same time.

What we cannot delete for you

• Your purchase history at Apple or Google. They keep their own record to meet tax and refund obligations. Ask them directly if you want it removed.
• Server logs. Cloudflare keeps request logs, including IP addresses, for a few days (currently up to seven) and then discards them automatically. They are not searchable by your id, so we cannot pull yours out early, but they expire on their own shortly after.

Crash reports and usage counts. Sentry and PostHog hold what section 8 of theprivacy policy describes, against a random id their SDKs made up on your install. Nothing in either is keyed to an identity we could look you up by, so there is no request we could make on your behalf. Turning the switches off in Settings stops anything further being sent, and what is already there ages out on its own.

Deleting one entry is not the same as deleting everything

When you delete a single entry while sync is on, what you wrote is erased from our copy and a small marker is left in its place, so your other devices know to remove it too. The marker records that a record once existed and when it last changed, and nothing of what was in it. The photo that entry carried is cleared by a job that runs on our server every day, once no entry in our copy has referred to it for about a month. The wait is deliberate, because a device that has been offline for a while can still be carrying the entry that photo belongs to. Treat it as a floor rather than a timetable: the waiting period is a setting we can change, and the job works through accounts in turn. Deleting your account clears all of it at once, and if you would rather clear a photo sooner than that, write to us and we will.

Deleting your subscription is a separate thing

Deleting your data does not cancel a paid subscription, and cancelling a subscription does not delete your data. Subscriptions are managed by Apple or Google, in your App Store or Play Store account settings. If you want both, do both.