Delete your account

In the app: You → Account → Delete your account.

On the web: sign in, then open your account page.

Both ask you to type your email address first. That is deliberate friction: this is the one action in Taala that cannot be undone.

• Your account itself — email address, display name, password, and any Google or Apple sign-in linked to it.
• Your highlights, notes and prayers.
• Your reading progress, your plan subscriptions and your notifications.
• Your membership of every group. You are removed from all of them.
• Your sessions, so the account cannot be signed into again.

All of it goes in one transaction, when you ask. There is no deleted-but-kept state: a flag claiming your data was removed while it sat in the database would be a lie, and a worse one than not offering deletion at all.

Anything you wrote in a group discussion. The text stays and is shown without your name. Deleting it would tear holes in conversations other people took part in, and their replies are their own words, not yours. If you want what you wrote gone, delete those posts first, then the account.

Groups you founded and custom reading plans you shared also stay, unattributed, for the people already using them. So do invitations you sent or accepted.

So “delete my account” does not mean “unsay everything I said”, and we would rather tell you that here than let you discover it.

Deletion is refused, and it names the groups holding it up. A group whose last admin vanishes cannot be administered by anyone: no member can be added, no invitation issued, and the group cannot even be closed.

Make someone else an admin, or delete the group, and then delete your account. We will not hand your authority over other people’s shared study to someone who did not ask for it.

Write to delete@hekaya.agency from the email address the account uses.That address is how we know the request is yours; we will not delete an account on somebody else’s word.

A person does this by hand, so it is not instant. If you want it done the moment you ask, use the app or the account page above.

Security records expire on their own: sign-in counters within the hour, and refresh tokens within thirty days of their last use. Nothing in them says who you were.

A phone still signed in elsewhere stops working rather than keeping a copy — what it asks the server for is gone. Signing out of a device also erases the app’s own storage on it, so nothing you wrote is left behind for the next person to use it.