Deleting your glumea account
Contents
You can delete your glumea account inside the App, or request deletion by email without reinstalling it. This page explains both routes and what happens to your data.
Before you start: this cannot be undone
Deleting the account removes its data from our production database. The in-app route also clears local data on that device. An email request cannot erase data stored on your devices. Existing backups, store records and some provider records can persist as described below. The production deletion has no user-facing recovery route.
If you may need those records later, for your healthcare team, for example, export them first. In the App, Settings → Data & privacy → Data import & export creates an encrypted .glumea archive of your entries, medications, profile, therapy targets and reminders; app settings such as units, language and theme are not in it. The glucose screens can also export a CSV or a PDF.
A .glumea file can only be imported back into the account that created it. Once that account is gone, nothing can open the file again, not you, not a new glumea account, not your healthcare team, because it is an encrypted container rather than a readable document. So if you want records you can still read afterwards, export a CSV or PDF as well. Save the files somewhere outside the App before you continue.
If you have the App installed
- Open Settings → Account.
- Tap Delete account at the bottom of the screen.
- Type the confirmation word shown on the screen, then tap Delete account again to confirm.
The App deletes your account on our servers first, and only wipes the copy on your device once that has succeeded. If the server cannot be reached, nothing is deleted and you can try again later.
If you only want to remove the cloud copy
Open the Cloud sync sheet with the cloud button at the top of the Summary or History screen, turn the Sync switch off, then tap delete it in the line underneath and confirm with Delete. The App insists on the switch being off first, so that the wipe cannot race an upload already in flight, and it will tell you if there is nothing on the server to delete.
This erases the entries, medication catalogs and medication schedules we hold on our servers. It does not delete your account: your email address, your profile and your glucose targets stay with us, and the diary on your phone is kept. If you switch Cloud sync back on later, the App uploads that whole diary back to our servers.
Use this route if you want to stop using cloud sync but keep using glumea.
Sync can also stop on its own, without you turning anything off. If your session expires, the App does not log you out and nothing is deleted, it parks sync instead. The Cloud sync sheet then shows “Session expired, so nothing is being synced. Log in again to resume.”, and the switch stays on but reads Paused. You can still turn it off, but you cannot turn it back on or delete the server copy until you sign in again. Your diary stays on your phone and whatever is already on our servers stays there; nothing new joins it. So if you are relying on the cloud copy to survive a lost phone, it is worth opening that sheet now and then.
If you no longer have the App
Email [email protected] with the subject Delete my account. Include the email address linked to your glumea account if you know it. You do not need to reinstall the App or sign in. Please do not send your password or health records.
We will acknowledge your request and contact you to verify that the account is yours. After verification, we will delete the account and its associated data from our production systems and request deletion from RevenueCat and PostHog. We will respond without undue delay, generally within one month of receiving your request. If we need more information or must retain a particular record, we will explain that in our reply. You can use this route even if you can no longer access the email linked to your account, although we will need another way to verify ownership before deleting it.
Deleting your glumea account does not cancel an active store subscription. Follow the cancellation steps below separately.
Cancel your subscription separately
Deleting your glumea account does not cancel a glumea+ subscription, and does not refund it.
glumea+ is bought through the Apple App Store or Google Play, and the subscription belongs to the store account that bought it, not to your glumea account. Cancel it there before you delete your glumea account:
- iPhone or iPad: Settings → your name → Subscriptions → glumea → Cancel Subscription.
- Android: Google Play → your profile picture → Payments & subscriptions → Subscriptions → glumea → Cancel subscription.
If you have already deleted your account, the cancellation steps above still work, the subscription belongs to your store account, not to your glumea account.
The Terms of Service are the authoritative version of both routes, cancelling in section 15.6, refunds in section 15.7, including the desktop routes, and the fact that cancelling stops the next renewal without shortening the period you have already paid for.
What is deleted, and what remains
| Where | What happens |
|---|---|
| Our database | Your account and every record linked to it are deleted outright, not marked as hidden. |
| Our server backups | A backup taken before account deletion still contains the account until that backup expires: 7 days. Individual rows are not removed from existing backups, and a disaster-recovery restore can temporarily reintroduce deleted rows. |
| Your device | Deleting the account inside the App clears its local database, sign-in credentials and stored preferences on that device. An email request deletes server-side data but cannot wipe a copy already stored on a device. Clearing stored analytics or diagnostics preferences does not reliably disable an SDK that was already initialized until the running process ends. Export first if you still have access. |
| Apple / Google | Your subscription and payment history belong to your store account and stay with them under their own policies. We never receive your payment details and cannot delete anything held there. |
| RevenueCat | We delete the subscription notification records for your account from our database and request deletion of the RevenueCat subscriber record. If RevenueCat is unavailable, the request remains queued for retry. Store billing records remain with Apple or Google. |
| Diagnostics | If error reporting ran, past crash reports may still exist. They carry no name, email address or glumea account identifier configured by our code, so there is no supported lookup for one person’s reports. Native crashes may contain SDK or platform fields outside the App filter. |
| Product analytics | We request deletion of the PostHog profile linked to your account, including its events and recordings. The request can finish asynchronously or remain queued for retry if PostHog is unavailable. Pre-sign-in events use a separate pseudonymous device identifier. |
| Copies you made | Any .glumea archive, CSV or PDF you exported is yours and stays wherever you saved it. We have no access to it and cannot delete it. |
Your other options
Deleting your account is not the only control in the App. Usage analytics and Error reporting can be switched off in Settings → Data & privacy → Privacy & diagnostics. Cloud sync controls are in the Cloud sync sheet opened from the cloud button on the Summary or History screen. The Privacy Policy describes the controls and their current limitations.
Questions
For account deletion requests and general questions, email [email protected]. The Privacy Policy describes the available controls.
Washington’s Consumer Health Data Privacy Policy describes the statutory 45-day response period and appeal requirement. Nevada’s Nevada Consumer Health Data Privacy Notice describes its 30-day deletion period after authentication. Both notices identify where the implemented controls do not satisfy the full statutory process.