1. Overview

This policy describes how Recipe Retriever ("we", "our", "us") deletes user accounts and the personal data associated with them. It supplements our Privacy Policy and applies to every account on the Service.

2. What gets deleted

When an account is deleted — whether at your request or by an administrator — we permanently remove the following:

• Your Firebase Authentication record (email, password hash, sign-in providers, display name, photo URL).
• Your user profile and preferences (users/{uid}/profile).
• All of your saved recipes (users/{uid}/recipes) and any folders you created (users/{uid}/folders).
• Your meal plans (users/{uid}/mealPlans) and grocery lists (users/{uid}/groceryList).
• Your usage counters (users/{uid}/usage).
• Public mirrors of any recipes you shared, including their comments and likes (publicRecipes/{recipeId}).
• Every file you uploaded or that the Service generated for you in Cloud Storage under users/{uid}/ (recipe photos, AI-generated images, etc.).

3. What may persist after deletion

• Stripe billing records. If you subscribed, Stripe retains payment, invoice, and tax records for as long as required by law (typically 7 years). We can disassociate the customer from your account but cannot purge Stripe's records on your behalf.
• Server logs and backups. Operational logs and Firestore backups may contain references to your UID for up to 30 days before they age out automatically.
• Comments and likes you left on other users' public recipes. These are deleted when reasonably possible. If any individual record cannot be removed automatically, contact us and we will delete it manually.
• Aggregated, anonymised analytics. Counts and metrics that cannot be tied back to you are retained.

4. How to request deletion

You can request that we delete your account and all associated data at any time:

• Email support@developerbox.ca from the address associated with your account, or include your account email in the message.
• We may ask you to verify control of the email address before processing the request.
• Deletion requests are processed within 30 days of verification. In practice we usually complete them within a few business days.
• You will receive a confirmation message once deletion is complete.

5. Administrator-initiated deletion

An administrator may delete an account without a user request when required to do so — for example to comply with a legal order, to remove content that violates our Terms of Service, or to clean up abandoned, fraudulent, or abusive accounts. Administrators with the necessary privileges perform deletions through an internal tool that applies the same cascading deletion described in section 2 and writes an audit log entry.

6. Irreversibility

Deletion is permanent. We cannot recover deleted recipes, images, comments, or account data once the process completes. If you simply want to take a break, you can sign out and return later — your data is preserved as long as the account exists.

7. Self-service options

• You can delete individual recipes from the My Recipes page at any time.
• You can change a recipe's privacy from public to private, which removes it from the public mirror immediately.
• You can clear your grocery list and meal plans from their respective pages.

8. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by updating the "Last updated" date above and, when appropriate, by direct notice through the Service.

9. Contact

For deletion requests or questions about this policy, contact support@developerbox.ca.