Deleting your Alapon account

This page explains how to delete your Alapon account, what is deleted, and what is kept. Google Play requires a page like this. It is also the page a person should be able to find when they have decided to leave and do not want to read a privacy policy to work out how.

Alapon is operated by LeadRescue LLC, contactable at saul@sitesbysaul.com.

Delete it from inside the app

1. Open Alapon and sign in. 2. Tap Settings. 3. Scroll to the bottom and tap Delete my account. 4. Confirm.

It happens immediately. There is no waiting period, no "are you sure" email, and nothing to cancel afterwards — which is the point, but it also means there is no undo.

Delete it without the app

If you have uninstalled the app, lost the device, or cannot sign in, email saul@sitesbysaul.com from the address you registered with and ask for your account to be deleted. You will get a reply confirming it is done.

Emailing from a different address means we have no way to tell that the account is yours, so we will ask you something only the account holder could answer rather than delete an account on a stranger's say-so.

Delete some of it, without deleting the account

You do not have to choose between everything and nothing:

• Conversations — delete any conversation from the chat list.
• Memories — Settings → Memory. Inspect, edit, or delete each one, or clear them all. Memory is off until you turn it on, so there may be nothing here.
• Documents — Settings → Documents. Delete any upload. Everything you upload is deleted automatically after 30 days anyway.
• Export first — you can download a copy of your data before deleting anything.

What deleting the account removes

Immediately, and permanently:

• Your conversations and every message in them
• Everything Alapon remembered about you
• Documents you uploaded, and the search index built from them
• Your email address, which is scrambled rather than kept in plain text, so the address is released and can be used to register again
• Every signed-in session, so no device stays signed in

What is kept, and why

Two things outlive the account. They are listed here rather than buried, because nobody should discover this after asking to be deleted.

• Security records — sign-ins, failed sign-ins, and session-token reuse. If a user could erase these, an attacker who took over an account could erase the evidence of having done it.
• Safety records — kept only when a message was blocked or specially handled, never for ordinary messages, with an excerpt capped at 300 characters. They exist so a decision can be reviewed if someone says it was wrong.

Both keep an account identifier that, after deletion, no longer points to a person: there is no email, no name and no conversation left for it to resolve to. Neither holds the content of your messages beyond that excerpt.

Crash reports, if you left them switched on, also remain — but they never contained anything about you. A crash report carries the programming error and your phone model, never your messages and nothing that identifies you.

If something here is wrong

Email saul@sitesbysaul.com. That address is read by a person.