Section 01
How to delete your account from the app
Open WatchScope on your device. Tap the Profile tab (bottom navigation bar). Inside the Profile menu, tap the Profile entry (the account-details sub-page, marked with your name and avatar). Scroll to the bottom and tap DELETE ACCOUNT. Read the warning carefully — the action is irreversible — then tap DELETE FOREVER in the confirmation dialog. The process completes within a few seconds; you'll be returned to the welcome screen and your account no longer exists.
Section 02
What gets deleted
Account deletion erases all data tied to your account across our systems: the Firebase Auth record (email, password hash, sign-in providers, UID); the Firestore profile document (your username, photo URL, language and theme preferences, currency, collection start year, referral code and history); the full watch collection (every brand, model, reference, caliber, year, condition, purchase price, market value, notes and service history you've recorded); every measurement on file (Quick Tests, full COSC sessions, hardware calibration history); every uploaded image on Firebase Storage (profile avatar and watch photos); your public Vetrina at watchscope.app/collection/your-username if you ever claimed one (the username is also released back to the pool of available slugs); and your RevenueCat customer record (entitlement history, transaction records, advertising identifier if collected, all custom attributes). Crashlytics anonymous crash reports stay on file because they're not linked to your identity once you're deleted from Auth.
Section 03
What we retain, and why
One small record survives: a tombstone stored at /deletedAccounts/{your-uid} with a sha256 hash of your email (NOT the raw email), the IP address last seen for your account, your referral statistics (how many invites you generated, how many you redeemed), and the deletion timestamp. We retain this for exactly 90 days, after which it is permanently and automatically deleted by a scheduled cleanup job. The legal basis is legitimate interest (GDPR Art 6.1.f): the tombstone prevents abuse of the referral system through delete-and-recreate cycles, and the email hash is irreversible (you cannot recover the original email from the hash). The tombstone is not used for any other purpose and is never shared with third parties.
Section 04
Timeline
Firebase Auth, Firestore profile and watch collection, and Firebase Storage images are erased immediately (within a few seconds of confirming deletion). RevenueCat customer deletion runs server-to-server via Cloud Function and typically completes within 30 seconds; in rare cases of upstream API throttling it may take up to 5 minutes. The vetrina username is released within the same window. The 90-day tombstone is automatically deleted by a scheduled job — no manual intervention required. There is no human review and no waiting period imposed by us; the only delays are the ones inherent to network propagation.
Section 05
Alternative method: deletion by email
If you've lost access to the device that runs WatchScope, or if you cannot complete the in-app procedure for any reason, you can request deletion by email. Write to privacy@watchscope.app from the same email address you registered with (we use this to verify identity — a request from a different address would be rejected without action). Include the subject line "Account deletion request". You may state "Please delete my WatchScope account and all associated data" in the body; no further justification is required under GDPR Art-17. We process email requests manually within 30 days and confirm completion in writing.