Delete it yourself, in the app
This is the fastest route. It needs nobody's help and it happens while you wait:
- Open Pipkin and go to the You tab.
- Tap Settings.
- Under Account, tap Delete account.
- Read the warning, then tap Delete my account.
Ask us to delete it instead
If you have already removed the app, cannot sign in, or would simply rather ask, write to privacy@pipkin.eu from the email address the account uses and tell us you want it deleted. There is no form to fill in, and nothing to pay.
Please write from the account's own address. We will not ask you for an identity document — the mailbox is the proof — but a request from anywhere else may need a question answered that only the account holder could answer, because deleting the wrong person's account is the worse of the two mistakes.
We reply within one month at the outside, and in practice within a few days. If we need longer we will say so, and why, before the month is up.
Cancel Pipkin+ first
Deleting your account does not cancel a Pipkin+ subscription. The subscription is held by Apple or Google rather than by us, and we cannot cancel it on your behalf. Cancel it in your App Store or Google Play account settings before you delete, or you will go on being charged for an account that no longer exists.
What is deleted
All of this is erased permanently. There is no grace period and no way to bring it back:
- Your sign-in — the email address and password, any Apple or Google sign-in linked to the account, and any two-factor enrolment.
- Your profile: display name, tagline, dietary preferences, and your profile photograph, including the image file itself.
- Your allergen list.
- Everything in your kitchen, with its dates.
- Your saved recipes.
- Your cooking history, and the Impact totals worked out from it.
- Your subscription record on our side — the tier, when it expires, and the customer identifier linking this account to the store. The subscription itself belongs to Apple or Google; see above.
What is kept, and why
Recipes you submitted and reviews you wrote stay in the app, with your display name replaced by the neutral label Former member and the link to your account removed. Nothing that remains points back to you.
They stay because they are no longer only yours: other people have saved those recipes and cook from them, and deleting an account would take away somebody else's dinner. If you want a particular recipe or review taken down as well, ask us before you delete the account — afterwards the link is gone, and there is no way for us to tell which ones were yours.
A report you sent us about somebody else's content stays while we deal with it, also with the link to your account removed.
We take no payment ourselves, so we hold no invoice or tax record about you. Apple and Google keep their own record of a purchase under their own policies.
How long it takes, and what lingers
- In the app: immediately. The account is gone before the app returns you to the sign-in screen.
- By email: as soon as we have read your message, and within one month at the outside.
- Encrypted database backups: your data is in them until they roll off, which is no more than 30 days. A backup is never restored to bring a deleted account back.
- Server logs, which record that a request happened rather than what is in your kitchen: a short operational period.
- The recipes and reviews described above: indefinitely, with your name and the link to your account already gone.
The providers who hold it
Supabase holds the database, the sign-in and the file storage, in the European Union. The deletion above runs there.
If you subscribed, RevenueCat holds a record of the purchase against a customer identifier. That identifier is the account id we have just deleted, so afterwards it resolves to nobody; ask us if you would like the record itself removed as well.
Our email provider keeps a delivery log of messages already sent to you, for a short period. Nothing there is ever restored into an account.
Photo scanning sends the photograph to Anthropic and no account detail at all, so there is nothing of yours there to delete.
The copy on your phone
Deleting the account signs the app out and clears the cached copy of your account data on the device.
Two settings are held in both places, and it is the account's copy that the deletion takes: the language, which is kept with your login so a confirmation or password-reset email arrives in it, and whether expiry reminders are on.
The phone keeps its own copy of those, along with the appearance you chose, whether haptics are on, and any reminder already scheduled with the operating system — the reminders were scheduled on the device and never left it. Uninstalling Pipkin removes all of that with it.
Contact
Jakub Andrejco
Lopuchová 56/17, Antošovice, 711 00 Ostrava
29914477
privacy@pipkin.eu