Delete your account

How to request deletion

Account deletion is requested from inside the app: open Grouw, go to your account settings, and choose to delete your account. You will need to be signed in to request it — this is what proves the request actually came from you.

What happens immediately

The moment you request deletion, several things happen right away, before the deletion itself completes:

• You are signed out, and your account can no longer be used to sign in.
• Every device that was trusted on your account is un-trusted.
• Any businesses you help run (as an owner, supervisor, or agent) have your access to them revoked, and your own business profiles are disabled.
• Any active QR code tied to your account stops working, so it can't be used to earn or redeem points after this point.

The 30-day window

Deletion does not happen instantly — your account enters a 30-day pending state first. This exists so a deletion you didn't mean to request, or change your mind about, can be undone.

To cancel a pending deletion, verify your phone number again in the app within the 30-day window. Once you do, your account is restored to normal — with one exception: any business access or QR codes that were revoked when you requested deletion are not automatically restored, since those are treated as a deliberate security measure rather than a side effect to undo.

If the 30 days pass without cancellation, deletion proceeds automatically and cannot be undone afterwards.

What is permanently removed

Once the 30-day window closes and deletion completes:

• Your phone number is replaced with an irreversible cryptographic hash — we do not keep it in a form that could be read back or matched against a phone number you enter in future.
• Your profile photo is deleted, and any secondary contact details (like a recovery email) are cleared.
• Your display name is replaced with a generic placeholder wherever it still appears (for example, on a business's historical records).
• Your sign-in identity is permanently deleted, so no future sign-in is possible with that account.

What we keep, and why

Some records are kept in de-identified form after deletion rather than erased outright, because they serve purposes that outlive your account:

• Transaction history: kept for accounting and fraud-prevention purposes for a limited period, but no longer linked to an identifiable phone number or profile once your account is deleted.
• Security logs: kept for a shorter period specifically to help detect and investigate fraud or abuse across the platform, again de-identified after deletion.
• These records are retained only for a defined period appropriate to their purpose, not indefinitely, and are not used to reconstruct your identity or contact you.