Current in-app path
In a build with cloud coordination enabled, open Settings → Cloud coordination → Delete account and follow the confirmation step. The reviewed source clears local photos, local media/provider data, signs out, and calls a Supabase Edge Function that is intended to remove hosted account data.
The source contains the client call, Edge Function, and migration, but hosted deployment and end-to-end deletion have not been verified in this task. Do not claim that deletion is complete until the deployed function, authorization, storage cleanup, database cleanup, auth deletion, and user-facing confirmation have been tested.
What the verified flow is intended to cover
- App-local data: remove local photos, local pause-related data, and enabled local provider data from the device.
- Hosted account data: remove the authenticated user and associated rows/storage only after the production-safe deletion function is deployed and tested.
- Session state: invalidate the local session and return the user to a signed-out state.
- Confirmation: show a clear success or failure result and give the user a support path for exceptions.
What deletion may not cover
Device backups, operating-system caches, app-store records, third-party provider accounts or content, legal records, security logs, or copies held outside Fraction Compliance’s control may remain subject to their own policies. The final Privacy Policy must state the exact retention exceptions and timeframes.
Never send a password, OAuth token, private photo, or other sensitive content through an unconfigured request channel. A real form must authenticate or safely verify the requester, minimize data, protect transport, prevent abuse, route the request to an owner, and provide a reliable confirmation.
Owner action before launch
Replace the static placeholder with a verified public form or clearly monitored email at [[DELETION_FORM_OR_EMAIL]]. Confirm the support owner, identity-verification process, response timeline, hosted function deployment, storage/database/auth cleanup, logs, backup handling, and the final Apple/Google account-deletion disclosures.
Static request placeholder
This is intentionally a non-functional form so the page can be reviewed without collecting personal information. Submitting it only displays the message below in your browser.