Deleting your account and data

In the app

1. Open More using the profile icon beside search. Older versions have a More tab. Open the account card at the top; a guest sees Link account, and a linked account may show the breeder’s name.
2. Choose Delete account and data. To keep a copy of your loft, save a backup outside the app first. You do not need to link a guest account to request deletion.
3. Read the summary and confirm with "Yes, delete everything". A linked account requires a recent sign-in; the app may ask you to confirm with your sign-in method. Cancelling that confirmation does not send a deletion request.
4. Keep an internet connection while the request is sent. The app shows progress and checks the same request again after a lost connection or restart. Local data is cleared after the server confirms completion.

What is deleted or changed

We delete the account’s loft records and cloud files, passkeys and restore credentials, RevenueCat customer and sign-in account. Once completion is confirmed, this installation’s app data is cleared. The account’s private auction contact profile, viewing markers, notification registration and ratings are also removed, and contact access through its auctions is stopped.

Unfinished auctions owned by the account, and active auctions where it is the leading bidder, are cancelled. Its own listings are hidden. Private email and phone contact copies are removed; selected direct account links in retained bid, report, audit and promotion records are replaced with technical hashes. Necessary identifiers can remain in restricted evidence records, including accounts referenced in moderation decisions. Ended auction results and prices are not rewritten.

What can remain and for how long

• A minimal deleted-account marker (account identifier and date) and the deletion-request record (identifier, state and dates) remain without automatic expiry. They prevent delayed sync or purchase events from recreating deleted data and let the app check the request after a break. They contain no loft contents.
• RevenueCat purchase notifications naming the account identifier can remain for up to 90 days.
• Limited auction bid/moderation evidence, promotion transaction records and technical registers against duplicate purchase grants or ranking resets remain in a non-public archive. An originally published business name, postal address, registration details and email can remain in the restricted listing archive. No automatic expiry is currently set for these archives and registers. We assess erasure requests and objections against service protection, legal obligations and claims; hashed identifiers are still treated as potentially personal data.
• Backups you saved outside the app, device system backups and data already lawfully retained by other people are not erased remotely. Material others saved or shared can remain in their copies. Providers and stores retain their own records under their applicable policies.

Deleting the account does not cancel a subscription. Cancel it separately in Google Play or the App Store to avoid further charges.

Delete selected data without deleting your account

Use the delete actions in the app to remove individual loft records and attachments. Cloud files are removed 7 days after their record is deleted; a replaced race-list photo is removed after 30 days. To request deletion of other data, write to pigeontreeapp@gmail.com, identify your account and say which data you want removed. We will confirm ownership and explain if a limited record must be kept for security, a legal obligation or a claim. You do not have to delete the entire account to make this request.

No access to the app?

Write to pigeontreeapp@gmail.com with the subject "PigeonTree account deletion". Tell us how you signed in and, if available, the email address of the linked Google or Apple account. We will reply with what is needed to confirm the account is yours. Do not send passwords, passkeys or one-time codes.

We may be unable to identify a guest account with no linked sign-in when you no longer have the phone. A guest account unused for 24 months and without active Plus is deleted automatically. We do not delete data on an unconfirmed request, and do not promise an automatic deadline for completing a request that needs ownership checks or a review of retained evidence.

More about data, providers and retention: privacy policy.