Deleting your account

Account deletion is self-service, completes inside the product, and is permanent.

In the iOS app

Account, Delete account. Type DELETE to confirm. The deletion completes in the app (DELETE /api/account); the app signs out and unregisters the device.

On the web

Settings, Account, Delete account (POST /api/auth/delete-account/request). A confirmation email is sent.
Follow the link, or enter the code, to confirm (POST /api/auth/delete-account/confirm).

What is erased

Your user record, every domain and its scan history, change events, lookalike results, DMARC reports and the report address, monitored addresses and their cached breach results, API keys, conversations, compliance records, device tokens, and credits. The audit log entry recording the deletion is kept.

What is not

An Apple subscription. DomainGuard cannot cancel it. Cancel under Manage subscription (Apple's settings) before deleting, or it renews against an account that no longer exists and the charge has to be refunded through Apple.
Aggregate and anonymised records that identify no person: the status catalogue, the vulnerability feeds, and operational error records, which are pruned on their own schedule (see Privacy and retention).

Before you delete

Export anything you want to keep: the PDF report, the accessibility audit JSON, the lookalike evidence pack. Nothing can be recovered afterwards.
Cancel the Apple subscription.
Rotate or revoke API keys that scripts still use, so they fail loudly rather than mysteriously.

Sign out is not delete

Sign out keeps the account and everything in it; Delete account does not. Both are rows in the app's Account list, and Delete is deliberately not red so it is read rather than reflexed.

Common questions

I deleted by mistake. There is no undo. Create a new account; domains can be re-added and re-scanned, but history is gone.

Will you email me after? Only the confirmation of deletion. The address is removed from every list.