Deleting your account

1. Open Spiso and go to Settings.
2. Open your account, the section showing the email address you signed in with.
3. Scroll to Delete account at the bottom.
4. Enter your password, and type DELETE to confirm.

Both are asked for on purpose. An account holds the only copy of an encrypted kitchen that exists off your phone, and a mistap should not be able to end it.

If you cannot sign in, email hello@spiso.app from the address you signed up with and ask for the account to be deleted. A real person reads it.

• Your account itself: your email address, your display name if you set one, and the hashed password.
• Every signed-in session, on every device.
• Your encrypted cloud backup.
• Any kitchen you own, including its encrypted contents and any invitations you sent.
• Your membership of kitchens other people own, so you disappear from their member list.
• Any invitation sent to your address, or sent by you and not yet accepted.

All of it happens in a single database transaction, so it either completes or it does not happen at all. There is no partial state where your account is gone but its contents are not.

If someone else still belongs to a kitchen you own, deletion is refused until you remove them or hand the kitchen over. This is deliberate: deleting your account deletes the kitchens you own, and somebody else’s shopping list should not vanish because you closed your account. Remove them, or ask them to leave, and try again.

• The inventory on your own phone. Spiso works offline and that copy is yours, so deleting the account leaves it alone. To remove it, clear the app’s data or uninstall Spiso.
• Encrypted backups of the database. The server keeps seven daily, four weekly and six monthly snapshots, so an encrypted copy of a deleted account can persist for up to about six months before it rolls off. They are encrypted before they leave the server and are not readable by the company that stores them, and they are never used to bring an account back.
• Your subscription, if you have one. Deleting your account does not cancel it, because Spiso never had it to cancel. The subscription lives with Google Play or the App Store. Cancel it there, or you will keep being charged for an account that no longer exists.

You do not have to delete the account to get rid of data. Inside the app you can remove any item, delete a kitchen you own, or sign out every device at once from the account screen. Each of those takes effect on the server as soon as it syncs.

If you want a copy of anything before it goes, export it first: Settings offers your whole inventory and history as JSON or CSV, with or without an account.

The privacy policy covers what Spiso stores in the first place, what the server cannot read, and which outside services are involved.