Zapfä
Departure

Delete your account.

Three taps inside the app. No forms, no waiting list, no 'are you sure' guilt-trips.

i. How to delete from inside the app

The deletion path lives in the iOS app — not on the website — because it’s the most secure place to confirm “yes, this is really you, and you really mean it”:

  1. Open the Zapfä app on your iPhone.
  2. Tap Settings (gear icon, top-right of the cellar tab).
  3. Scroll to the bottom and tap Delete account.
  4. Type DELETE in capital letters in the confirmation field, then tap the burgundy Delete account button.

That’s it. No email round-trip, no support ticket, no waiting period. The deletion request is processed immediately.

If you’ve lost access to the device with the app — phone gone, account locked out — email support@zapfae.com from the email address on the account and we’ll process the deletion manually.

ii. What gets removed

Everything tied to your account, immediately:

  • Your account record (email, sign-in credentials)
  • Every bottle in your cellar (purchased + gifted + opened + given away)
  • Every rating, tasting note, food pairing, and personal note
  • Every label photo and profile photo you’ve uploaded
  • Every AI conversation and its history
  • Every push-notification device token
  • Your subscription record (if any — the App Store separately governs the subscription itself; cancel that in iOS Settings → Subscriptions before deleting)

If you’re a member of someone else’s shared cellar, your membership is removed; the owner’s cellar continues to exist (we never delete someone else’s data when you leave).

iii. What gets retained

None of your personal data. We keep no profile, no pseudonymous shadow record, no “tombstone” entry that would let us identify you later.

The only short-lived retention is the standard 30-day backup window held by our infrastructure providers (Supabase Postgres point-in-time recovery, Cloudflare R2 object versioning). These backups exist for disaster recovery only; they expire automatically on rolling 30-day windows and we never query them for any individual record after deletion.

iv. Timeline

  • Immediately on deletion: you’re signed out everywhere; new sign-in attempts with the deleted email return “account not found”.
  • Within minutes: the live database row is purged; your photos are removed from object storage.
  • Within 30 days: all infrastructure backups age out and your data is gone in every form, including disaster-recovery snapshots.

If you ever come back, you sign up fresh — none of your previous cellar carries over.

v. Contact

If anything in the in-app flow is broken or you want a confirmation in writing that the deletion completed, email support@zapfae.com.