Delete your Tolar account and data

This page is for Tolar (Android package si.vstaric.tolar), published by N1, Programerske storitve, Vid Starič s.p. It sets out how to delete your account, what that removes, and the three things it cannot reach.

Deleting the account, in the app

Deletion is done in the app and needs no message to us, no email address and no waiting. It is immediate and permanent.

1. Open Tolar.
2. Tap the ⚙ settings control, top right.
3. Scroll to the bottom and tap Delete account & data.
4. Confirm. The app asks the server to erase the account first, and then wipes the phone — in that order, so nothing is left stranded on the server if the phone is wiped first.

What is deleted

• Every loyalty card, card photograph and list entry on the device, together with the keys that decrypt them — so nothing left behind can be read.
• Your account on our server, and with it the cards, shopping-list slices, connections, sharing requests and responses, push registrations and pairing codes recorded against it.
• Your Diagnostics setting, and any reports not yet sent.

Nothing is retained on a timer afterwards. There is no grace period and no archive: the account is gone when the operation completes.

What deletion cannot reach

Three consequences fall outside it. They are stated here rather than left to be discovered.

• People you shared with keep their copies. Anything you shared was decrypted on their device and belongs to them there. No deletion we perform reaches another person's phone.
• A shared list stays on the server. It belongs to the people you shared it with as well, and removing it would remove their copy. It keeps an unreadable trace of the deleted account, but the account itself no longer exists — nothing can open it and nothing can be delivered to it.
• Uploaded photograph files remain. They are stored by their content rather than by owner, so an identical file may belong to more than one account and deleting yours could remove someone else's. What remains is an unreadable, unreferenced blob that no account points to and that nobody, including us, can decrypt.

Deleting some things without deleting the account

• Delete an individual card or list entry in the app at any time.
• Turn Diagnostics off: collection stops at once and reports not yet uploaded are discarded.
• Turn Sync & Sharing off: synchronisation stops and your cards stay on the phone. This is not the same as deleting the account — see above for that.

If the app cannot reach the server

If the server is unreachable when you tap delete, nothing is deleted and the app tells you so rather than half-finishing. Try again when you have a connection.

If you have already wiped or lost the phone, the key that proves the account is yours is gone with it, and we cannot verify a deletion request the ordinary way. Write to info@vstaric.si and we will remove the server-side record.

Diagnostics already sent to Google

If you had Diagnostics switched on, some crash and usage reports will already be in our Firebase project. Turning the setting off stops any more being sent. To have what was already received deleted, write to info@vstaric.si.

The privacy policy covers the same ground in section 11, including retention periods for everything the app touches. Contact: info@vstaric.si