Account Deletion — Tirana Guide

# Account Deletion **Effective date:** June 22, 2026 You can permanently delete your **Tirana Guide** account and the personal data we hold about you at any time. This page satisfies Google Play and Apple App Store requirements for a web-accessible account deletion URL. **Deletion URL:** [https://devolist.com/apps/tirana-guide/apps/tirana-guide/account-deletion](https://devolist.com/apps/tirana-guide/apps/tirana-guide/account-deletion) ## Delete in the app (recommended) 1. Open **Tirana Guide** on your phone. 2. Sign in to the account you want to remove. 3. Go to **Profile** (account tab). 4. Tap **Delete account**. 5. Read the confirmation carefully, enter your **password** if you signed up with email/password, and confirm. If you signed in with **Google** or **Apple**, follow the in-app prompts; you may need to re-authenticate with your provider. After successful deletion you will be signed out and your account record will be removed from our servers. ## Delete on the web or by email If you cannot access the app, email [[email protected]](mailto:[email protected]) from the **same email address** registered on your account with the subject **"Delete my account"**. We will verify ownership and complete deletion within **30 days** (usually sooner). ## Delete via API (developers & power users) Authenticated users may delete their account programmatically. You must be logged in (Bearer token from sign-in). ### Option A — DELETE (recommended) ``` DELETE /api/v1/apps/tirana-guide/auth/me Authorization: Bearer Content-Type: application/json { "confirm": true, "password": "" } ``` ### Option B — POST ``` POST /api/v1/apps/tirana-guide/auth/delete-account Authorization: Bearer Content-Type: application/json { "confirm": true, "password": "" } ``` - `confirm` must be `true` or deletion will be rejected. - Email/password accounts require the correct `password`. - Google/Apple accounts may require a valid Firebase ID token instead of a password (see in-app flow). On success the API returns a confirmation message and timestamp. Your bearer tokens stop working immediately. ## What we delete When your account is deleted, we permanently remove from our active database: - Your name, email address, and phone number - Your password hash and authentication tokens - Your Firebase user link stored on our servers - Notification read state tied to your user ID ## What may be kept We minimise retention after deletion: | Data | Why it may be kept | | --- | --- | | One-way **hash of your email** + deletion timestamp | Legal compliance and abuse prevention (not readable email) | | **Aggregated analytics** | Anonymous statistics with no personal identifiers | | **Booking / order records** | May be retained without account link for accounting or disputes; personal fields disassociated where possible | | **Server security logs** | Short-term IP and request logs for fraud prevention | We do **not** keep your readable email or profile for marketing after deletion. ## Push notifications After deletion, delete the app or disable notifications in system settings to stop alerts. Stale device tokens are removed during routine cleanup. ## Firebase / Google / Apple accounts Deleting your Tirana Guide account removes data from **our** servers. It does **not** automatically delete your Google or Apple identity. Manage those accounts in your device or provider settings if you wish to remove them entirely. ## Processing time In-app and API deletion is processed **immediately** when confirmation succeeds. Email requests are handled within **30 days**. ## Need help? **Tirana Guide Support** Email: [[email protected]](mailto:[email protected]) Privacy policy: [Privacy Policy](/apps/tirana-guide/privacy)