Delete your Gooseberry account and data

In the app: iPhone, Android or the web app

1. Open Gooseberry on a device that’s signed in or linked, and go to Settings → Sync across devices.
2. Choose Delete account and synced data. On a device you linked with a code and no login, it reads Delete synced data.
3. Confirm. It takes effect at once.

On the web, without the app

1. Open app.getgooseberry.app/signin in any browser (or, in the web app, Settings → Sync across devices → Sign in).
2. Sign in with your username and password.
3. In Settings → Sync across devices, choose Delete account and synced data and confirm.
4. Signing in copied your holdings into that browser. To remove them too, clear the site data for app.getgooseberry.app in your browser’s settings.

What gets deleted

From our server, at once:

• Your login record: the peppered hash of your username, the salt, the hash of your password token and your sync key in its encrypted (“wrapped”) form, plus any other login made for the same synced data.
• The records of failed sign-ins on those logins: the counts, the time of the last one and the per-network records described in the privacy policy.
• Your encrypted vault: the encrypted copy of your holdings, goal and reinvestment (DRIP) settings, with its vault number, version, date and that day’s count of saves.
• Any pairing code made for it that hasn’t been used yet.

Your other devices stop syncing the next time they connect. Holdings already on each device stay there until you delete the app or, in the web app, clear the browser’s site data. Our database host keeps a short rolling recovery history (at most 30 days) that would be used only to recover from a failure; deleted records age out of it on their own, and the holdings in them stay end-to-end encrypted either way.

Automatic deletion after 18 months

Synced data that no device has synced for 18 months is deleted automatically, together with every login for it. You don’t need to do anything.

Forgot your password and lost your devices?

Then no one, including us, can open your synced data: it’s encrypted with a key only your devices held, and we can’t reset your password. It’s deleted automatically after 18 months without use. If you need help, email support@getgooseberry.app.

Holdings you never synced, and the email list

• Holdings you never synced live only on your device: deleting the app (or, for the web app, clearing the site’s data in your browser) deletes them.
• To stop emails, use the unsubscribe link in any of them. To have your address and survey answers deleted entirely, email support@getgooseberry.app from that address.

More about what we store and why: the privacy policy.