Delete my account and data

Your data-rights options

You have three options of increasing finality:

1. Cancel your subscription — billing stops; account + practice data preserved for 90 days. See Cancel my subscription.
2. Export your data — download a JSON of everything we hold on your account, no deletion. Settings → Manage Your Data → Export My Data. Honours GDPR Art 15 / DPDP §11.
3. Delete my account — removes your identifiable data. This page covers (3).

What happens when you request deletion

1. In the app, go to Settings → Manage Your Data → Delete Account — or sign in at anzanpro.com/delete-account on the web.
2. Confirm with a typed-in email match (we do this to prevent accidental clicks).
3. Your account is deactivated immediately — sign-in is blocked, billing stops, sync stops, and you are signed out on all devices.
4. Permanent erasure runs after the 30-day grace window has fully elapsed — a scheduled job then deletes your account row and cascades the deletion to children profiles, practice history, sessions, settings, and consent records. Because the job runs periodically, erasure completes after 30 days, not at an exact moment on day 30.

Which account gets deleted

AnzanPro accounts are isolated per app: the same email can hold a separate account in the Student (parent) app and in the Teacher app. Deleting one does not touch the other — the confirmation screen names exactly which account you are deleting (for example, "your AnzanPro Student account").

What survives deletion (and why)

Tax law in most jurisdictions requires merchants to retain financial records for 7 years. To honour that without keeping zombie user rows, AnzanPro snapshots the fields a financial record needs onto each purchase / refund / membership_event row at write time. After deletion:

• Your account row is gone.
• Practice progress, dashboards, family/classroom memberships are gone.
• purchases and refunds survive as stand-alone snapshot records for tax-audit reconstruction. They have no foreign key back to your user record — they can no longer be joined to an account; they exist as financial records.
• The audit trail keeps action verbs and timestamps with the actor reference anonymized, satisfying evidence-preservation rules.

Grace-period restore

If you change your mind within the 30 days, sign back in with Google at anzanpro.com — instead of signing you in, you'll see an "Account pending deletion" screen with the days remaining and a Restore my account button. Restoring cancels the scheduled deletion and brings everything back; for security all old sessions stay signed out, so you then sign in again normally. Once the grace window has elapsed and erasure has run, restore is no longer possible.

Compliance basis

This flow satisfies:

• GDPR Art 17 (right to erasure)
• DPDP §12 (right to correction and erasure)
• COPPA §312.6 (parental right to delete child's data)
• CCPA §1798.105 (consumer right to delete)