Data Deletion Policy

Version: 1.2 (Canonical English)
Last Updated: September 6, 2026

Family Ping provides a clear process for users to exercise their "Right to Erasure" (GDPR) and "Right to Delete" (CCPA).

1. Account Deletion Process

Delete account, in the app's Settings, is the primary route and it is immediate. Tapping it and confirming deletes the account and the associated data straight away. There is no request to raise, no administrator to contact, and no verification step. The family link stops at the same moment.

If you can no longer open the app — the phone is lost, or the app is uninstalled — write to contact@editerra.se from an address you can use for follow-up verification, and the same deletion is carried out for you.

2. Scope of Data Deletion

Family Ping deletes or deactivates the account and service data according to the current Firebase data model and applicable law:

A. Cloud Infrastructure (Firebase)

• Authentication: The user's primary authentication record is deleted or disabled where technically available.
• User Profile: The profile document containing display names and metadata is deleted where technically available.
• Location Data: The latest-location record and recent safety events are deleted where technically available, subject to retention, backup, audit, and legal constraints.
• Family Links: Active pairings and connections between the user and their family members are revoked or deleted.
• Notifications: The device's push notification tokens are invalidated or removed from the system.

B. Local Device Data

• Local cached data can be cleared by unlinking/signing out in the app or by uninstalling the app.
• Deleting the account from Settings also clears local role and link state and returns the phone to setup.

3. Deletion Requested by Email

The email route exists only for people who can no longer reach the app. Those requests are processed within the timeframe required by local regulations, typically within 30 days after verification. Anyone who can open the app should use Settings instead, which is immediate.

4. Irreversibility

Deletion is intended to be final for active service records. Some records may remain for a limited period in backups, logs, or legal/compliance records where permitted by law. Any family links must be re-established through a new pairing process after deletion or unlinking.