Account Deletion — PonderLock

You can delete your PonderLock account and the personal data associated with it at any time, directly from inside the app. This page explains how to do it, what gets removed, and what we must keep.

Delete your account in the app

Open PonderLock on your phone.
Tap Settings (the gear icon in the bottom navigation bar).
Scroll to the Account section.
Tap Delete account.
Confirm the prompt. Your account and data are removed from our servers immediately.

The deletion runs through a server-side procedure (delete_current_user) that removes the caller’s record and cascades to every related table in the same transaction. There is no waiting period and no “recover my account” window — once you confirm, the data is gone.

Can’t sign in?

If you’ve lost access to your Apple ID or Google account and can’t reach the in-app Delete button, email us at hello@ponderlock.com from the address linked to your account. We will verify your identity, delete your data, and reply to confirm.

What is deleted

When you delete your account, the following is removed:

Account record. Your email address, display name, and the Apple / Google identifiers associated with your sign-in.
Blocklist data. The apps and schedules you configured, and any blocklist session history.
Daily check-ins and ponder events. Your reflections, mood entries, and the timeline of moments you paused before opening a blocked app.
User state. Streak counts, onboarding status, and subscription mirror records stored on our servers.
Authentication session. Any active sessions are revoked.

What is retained

A small set of records is kept after deletion because we are legally required to hold it, or because it has already been de-identified from you:

Purchase and subscription history. Apple and Google retain purchase records independently under their own policies. Our subscription provider, RevenueCat, holds transaction records linked to an anonymous identifier for up to seven years for tax and fraud-prevention purposes.
Aggregated analytics. Usage statistics that were de-identified at the time of collection (such as which screens are opened, session lengths, and device/OS distribution) are kept indefinitely, since they can no longer be tied back to you.
Support correspondence. If you emailed us for help, we keep that thread so we have a record of what was asked and how we answered.
Backups. Encrypted database backups may contain your data for up to thirty days while the retention window elapses. Backups are not accessible to day-to-day queries and expire automatically.

Cancel your subscription first

Deleting your PonderLock account does not cancel an active App Store or Google Play subscription. Apple and Google manage subscriptions on your device, not us. If you want to stop being billed, cancel through:

iOS: Settings → [your name] → Subscriptions → PonderLock → Cancel.
Android: Play Store → profile → Payments & subscriptions → Subscriptions → PonderLock → Cancel.

We recommend cancelling before deleting the account, so that any subsequent renewals on the store side do not charge for an account that no longer exists on our side.

Contact