Data Deletion Requests in Small Apps
A data deletion request is a user asking you to erase what you hold about them. Small apps do not get a pass because the team is three people. Apple expects an account deletion path when you have accounts. Privacy law in many markets expects a process you can explain. This page is the operational minimum we use at Croncode. It is not legal advice. Counsel writes the policy. We write the product path so the policy is not a PDF that lies.
A small app still needs a deletion path: one owned inbox, a written clock, and a way to erase account data without a founder’s laptop. Silence is not a policy.
What should the in-app path do?
If the user can create an account, they should find delete account without emailing a mystery address. The flow should name what goes away and what you must keep for a legal reason, such as a paid invoice. It should not hide behind five settings screens. Support mail still exists for people who already deleted the app: support as a surface.
Store account ownership matters because the privacy URL and the support URL must stay alive: who owns the App Store account. Security questions before you sign: security questions.
Which systems do founders forget to erase?
- Analytics user IDs that outlive the account.
- Support threads and crash reports that contain email.
- Model logs if an AI feature sent text or photos off device.
- Marketing lists tied to the same address.
- Backups that restore the row next Tuesday.
Analytics without turning the app into a tracker: analytics without surveillance. AI logs: fail-safe AI and creep line. Brief the data class before you build: brief an AI studio.
When is email-only deletion acceptable?
| Product | In-app delete | Email path |
|---|---|---|
| Account plus cloud sync | Required | Backup for lost access |
| On-device only, no account | Uninstall may be enough | Say so in privacy text |
| Purchases via Apple | Delete app account | Billing stays with Apple |
Our consumer jobs differ. A closet may store photos. A decision tool may store a written choice. A narrative game may store progress. A transfer product may store a booking identity. See YourStyle, Numira, Spylie, Luviport. We do not invent retention days here. Write yours.
How fast should a small team answer?
Write a clock you can keep, such as a first reply in two business days and a completion target you actually staff. Europe/Istanbul overlap helps if users are in Turkey and the US entity is in Albuquerque. Shipping: how we ship. Hiring checks: Istanbul checklist.
Founder: Goktug Unver. Co-founder: Yusufhan Sokur. Team: Ozgur Ismet Ozkan. Do not put a personal laptop as the only place a delete script lives.
What mistakes create a privacy incident?
- Replying “we never store data” when you have an SDK: read the privacy label you submitted.
- Deleting the row and keeping the photo in a bucket: the object is the data.
- Using the same inbox as sales: deletion mail gets lost in a pitch thread.
- No export if you promised one: a lie on the paywall or the privacy page. Honest paywalls.
What we will not build includes fake privacy theater: will not build. Quote the data classes: quote packet. Hire: hire. Custom: custom software. Contact: contact. Journal: /en/journel/.
How do you rehearse deletion before launch?
Create a throwaway account on TestFlight. Delete it. Then search the dashboard, the logs, and the mailbox for the email. If you find it, the path is not done. Put that rehearsal in the sprint demo: sprint demo. Thin MVPs that skip this fail the store and the user: MVP too thin.
Handover a runbook if another studio takes the repo: handover. Catalog: what Croncode builds.
Frequently asked questions
Is uninstall the same as deletion?
Uninstall removes the client. Server copies remain until you erase them. Say which is which in the privacy text.
Do I need a DPO for a small consumer app?
That is a counsel question for your markets. You still need an owned inbox and a script that works.
What about App Store refunds?
Billing is Apple’s sheet. Deletion is your account and your logs. Do not mix them into one confused reply.
Can I delay deletion until after a marketing campaign?
No. A campaign is not a legal clock. If you cannot staff deletion, do not collect the account.
Will Croncode operate deletion for a client?
If the contract says we operate the backend, we will put the script in the company cloud, not on a personal machine. The listing owner still faces the user.
