Delete your data.
It's your data. You can take it back at any time. This page explains what we delete, how long it takes, and how to make it happen — in line with GDPR Article 17, the CCPA right to deletion, and equivalent privacy laws.
Who can request deletion
- Account holders. Anyone who created a Tabsira account — via email, Apple, or Google.
- Authorized representatives. A parent, guardian, or legal agent acting on someone's behalf, with proof of authority.
Using Tabsira without an account? Your reading progress lives only on your device — deleting the app deletes it. There is nothing on our servers to remove.
What gets deleted
When we process a deletion request we permanently remove everything tied to your account from our production systems:
- account profile — name, email, password hash, sign-in provider;
- reading progress — hasanat, verses understood, daily streak, chosen scholar and pace;
- every recorded reading session;
- authentication tokens (you are signed out everywhere).
What we may keep, and why
- Security logs. Standard server request logs, kept up to 90 days for abuse prevention, then purged.
- Backups. Encrypted backups are overwritten on a rolling 35-day cycle; your data leaves each backup the next time it rotates.
- Support correspondence. If you emailed us, that thread is kept up to 24 months unless you ask us to remove it too.
How to delete
Step 1 — Email us
Send a message to support@tabsira.app from the email address on your account, with the subject "Delete my Tabsira data". Signed in with Apple's private relay? Send it from the relay address the app shows on your Profile.
Step 2 — We confirm and delete
We acknowledge within 72 hours, verify the address matches an account, delete from production within 30 days, and confirm completion in writing — itemizing anything retained under a legal ground.
In-app deletion is coming: Settings → Account → Delete account will remove everything with one confirmation, powered by the same deletion the email path uses. Until that ships in the app, email is the way.
What happens after you ask
- We acknowledge within 72 hours with a reference number.
- We verify it's you — the email on file is usually enough.
- We delete from production within 30 days — account, progress, sessions, tokens.
- Backups rotate clean within 35 days after that.
- We confirm completion in writing.
Your other rights
Deletion is one of several rights you have over your data — access, correction, export and objection are covered in our Privacy Policy.