In the app
Deleting everything is one row in settings. It removes the account itself, not only its contents.
- Open Pentimento. On the home screen, tap settings — the word next to the PENTIMENTO masthead.
- On the Settings screen, go to the group your data.
- Tap Delete everything. It is the last row in that group.
- A sheet opens: Delete everything? It lists what goes from this phone and what goes from the server. If you want your copy first, the sheet offers Want your bundle first? Export your data — the export is assembled on your phone and nothing uploads. (The same Export your data row sits in your data in settings.)
- Tap Delete everything on the sheet. That tap is the confirmation — there is no second dialog and nothing to type. Keep everything backs out without deleting anything.
- The app then shows leaving no trace and works through four steps in order — unsent changes, server rows, this phone, account — finishing at nothing of yours remains.
If you no longer have the app installed
You do not need to reinstall it. Write to privacy@usepentimento.com from the email address on the account and we will delete the account and its data for you.
Deleting the app is not deleting your data — data on the phone goes with it, but synced data waits on the server until you delete it in-app first, or write to us.
If the app cannot reach the server
Nothing is deleted, and the app says so rather than pretending: “The server can’t be reached — nothing was deleted. Try again when you’re back online.” Everything on the phone is still there. Try again on a working connection.
If your sign-in is too old to authorise the final step, the app asks you to Sign in again to finish removing the account. Everything else has already gone by that point.
What is deleted
On this phone: every photo, every measurement, your cycle tags, your saved reports.
On the server: your concerns, products, your small daily measurements, your applied / skipped record — and the account itself.
What is kept, and for how long
When you delete your account we remove your data from our live systems straight away. Copies can still sit in our encrypted backups and recovery snapshots for up to 30 days, all held in the Netherlands; we don’t use them for anything except restoring the service after a failure, and they’re overwritten on schedule.
Your subscription is separate
Payment runs entirely through the App Store or Google Play. Withdrawing consent or deleting your data does not cancel a subscription — manage that in the store.