Delete Your Account - Inner Journal, Personal Diary

Last updated: 19 October 2026

This page explains how to request deletion of the account you use with Inner Journal, Personal Diary (the "App"), published on Google Play and the Apple App Store by CarryStudios.

By default, the App stores everything on your device only. Account deletion is therefore only relevant if you have signed in (free) and/or opted into Cloud Sync, App-Settings Backup, or have an active Plus subscription.

How to Delete Your Account from Inside the App

The fastest and recommended way is from inside the App itself:

1. Open Inner Journal, Personal Diary on your Android or iOS device.
2. Tap the gear icon (Settings) on the home screen.
3. Tap Account (first row under the "Account" section).
4. If you are not already signed in, sign in. Account deletion requires an active session and uses Google Sign-In, Sign in with Apple or email/password.
5. On the Account page, tap the ⋮ icon (three vertical dots, top-right - "More options").
6. Tap Delete Account (shown in red with a trash-can icon).
7. A confirmation dialog appears: "Are you sure you want to delete your account? All cloud data will be removed permanently. Your local diary data will be preserved." Tick the acknowledgment checkbox.
8. Tap Confirm. (The secondary action is Cancel.)
9. A "Deleting account…" spinner is shown; on success a confirmation reads "Account deleted. Local data preserved."

If your sign-in session is too old, the App will ask you to re-authenticate before completing the deletion (this is a Firebase security requirement for destructive operations).

How to Delete Your Account by Email

If you cannot use the in-app flow - for example, you no longer have access to the device, or your session is locked - write to us at:

contact@journalpersonaldiary.com

Send the request from the email address linked to your account, with the subject line "Delete my Inner Journal account". Include the email address used to sign in to the App (if different from the sender). Requests are handled manually; we may ask you to confirm ownership of the account before proceeding. Once confirmed, we delete the account and the deletion described below runs.

What Is Deleted

Deleting the account in the App and deleting it after an email request start the same server-side deletion, which removes everything we hold for your account:

• the account record (email, user ID, sign-in providers) held in Firebase Authentication;
• all cloud-synced diary content: diaries, days (text, mood, tags, day blocks, weather, places and similar metadata), photo and voice memo records, and Planner habits, goals and tasks;
• all files in Cloud Storage under your account: photos, voice memos, your profile photo and the screenshots and logs attached to feedback you sent;
• the cloud trash (recently deleted items), straight away rather than after its usual 7 days;
• the encryption metadata used by end-to-end encryption (encryption mode, passphrase salt and sentinel). The local cached encryption key is also forgotten on the device;
• the App-Settings Backup document and the badges backup;
• the purchase history, the Thought Points ledger, the subscription mirror and its audit events;
• your purchase record at RevenueCat, our subscription provider (purchase history, entitlements and subscriber attributes), unless the same purchases are also linked to another account you still use;
• sync state (per-device watermarks, sync job records);
• your invite code and invite programme state;
• your weather request count, your AI output ratings and any questionnaire answers you attached to your account;
• your website account and any AI chat app connections, with their tokens and usage records;
• the user profile document itself.

The local subscription mirror on your device is also cleared.

When It Is Deleted

• Within seconds of the deletion, all of the above is removed.
• About 2 hours later, a second pass removes anything written in the meantime, for example by another of your devices that was still signed in.
• Within 7 days at most, no copy of the deleted data remains in our Firebase project. We keep no database backups, so deleted database records can no longer be read after about an hour. Deleted files stay recoverable by us in Cloud Storage for 7 days, then they are removed permanently.

What Is Kept and for How Long

• Feedback messages you sent while signed in are kept, with your email address and display name, so we can follow up on what you reported. Their attachments are deleted. Ask us at contact@journalpersonaldiary.com if you want the messages deleted too.
• An invite anti-abuse record keyed to your device's random app-install identifier, with your account removed from it, is kept for 12 months and then deleted automatically. It stops the same device from redeeming a welcome gift twice by deleting and recreating an account. Records that belong to another person, such as the redemption record of a friend you invited, stay with them without your account.
• A deletion record holding only your user ID and the deletion time is kept for 7 days so the second pass can run, then deleted automatically.

Other records are kept by the underlying providers under their own policies, outside CarryStudios's control:

• Firebase Authentication may retain minimal anti-abuse / fraud signals per Google's policies.
• Google Play and the Apple App Store retain their own purchase, refund and tax records as the merchant of record for in-app purchases and subscriptions.

Crash reports, email delivery logs and analytics events follow the retention periods in our Privacy Policy (section 9).

What Stays on Your Device

Account deletion only affects data we hold on our servers. Your local diary data is never touched by account deletion - the on-device database (all diaries, days, photos, voice memos, mood, tags) and your app preferences stay exactly as they were before deletion.

Inside the App, three deletion actions are kept distinct:

• Delete Account (this flow): wipes cloud data + Firebase account. Local data preserved.
• Clear cloud data (separate item in the same Account ⋮ menu): wipes only the cloud copy of your diary content; the account stays; local data preserved.
• Delete a diary (home screen → long-press a diary → Delete): removes that diary locally only.

To remove local data:

• to remove all data the App stores on your device, uninstall the App, or open Android Settings → Apps → Inner Journal, Personal Diary → Storage → Clear data.

Uninstalling or clearing data does not by itself remove cloud data - use Delete Account for that.

Optional Google Drive Backups

If you have ever taken a manual backup to your own Google Drive, those .zip files live in your Drive under the App's restricted scope. They are not visible to us and are not removed by account deletion. To delete them, open Google Drive directly and remove the files yourself.

Cancelling a Subscription Is Not the Same as Deleting an Account

Cancelling your Plus subscription stops new content from being uploaded, except for up to 2 enrolled diaries, but does not by itself delete data already in the cloud. To fully erase cloud data, use Delete Account as described above, or use Replace cloud with this device inside the App to overwrite cloud content with the current local state.

Questions

For any question about this process, contact contact@journalpersonaldiary.com.

You can also review our full Privacy Policy and our Terms and Conditions for the underlying data flows and your rights under GDPR / UK GDPR.