Information and transparency

Deleting your account, with clear facts about what happens.

How deleting your account in AAK Legacy actually works: what gets deleted, when, and what remains open.

01

Where it starts

Account deletion always starts inside the app, under Settings → Delete account. No web form replaces this step.

02

What gets deleted on the server (immediate)

Once confirmed, the backend immediately deletes your account and, in cascade, virtually all associated data: recipients and their delivery packages, guardians and their assignments, activation rounds, devices registered for notifications, and any death-certificate submissions.

03

A minimal record is kept for up to 5 years

If there were decisions about a death-certificate submission on your account, a minimal record of those decisions — never the document or its content — is kept for up to five years, with your identifier pseudonymized via HMAC under a dedicated key, exclusively for the establishment, exercise, or defence of possible claims. Once the period expires it is deleted automatically, unless an active claim requires its limited retention until the procedure concludes.

04

What gets deleted on your device (local)

The app erases the encrypted content of the five spaces, your local keys, any temporary Recovery Kit export, and every cache tied to your account on that device.

05

What gets deleted in iCloud (asynchronous request)

The app requests deletion of your private CloudKit zone and automatically retries if it fails — a request, not an instant confirmation. Until that deletion is confirmed, the app blocks creating or signing into another account on the same device, to prevent interference between accounts.

06

Sign in with Apple

We attempt to revoke the Apple access token linked to your account. If Apple does not confirm the revocation, your account is deleted regardless: deletion is never conditional on that confirmation.

07

If you cannot access the app

Write to soporte@aakdeveloper.com. Before we can process a deletion this way, we will need to verify your identity as the account holder — we never delete an account without that verification.