Account & Data Deletion — BrainList
Last updated: May 9, 2026
This page explains how to permanently delete your BrainList account and the data associated with it. BrainList is operated by Haidar Al-Aubiydy, based in Ottawa, Ontario, Canada. For any deletion-related questions, contact support@brainlist.io.
How to delete your account
You can delete your BrainList account through any of the channels below. Deletion is immediate and irreversible — there is no soft-delete or recovery window.
Option 1 — Mobile app (Android)
- Open the BrainList app
- Tap Settings in the navigation drawer
- Scroll to Danger zone
- Tap Delete my account
- Confirm when prompted
Your account and all associated personal data are deleted immediately. You will be signed out of every device.
Option 2 — Web (app.brainlist.io)
- Sign in at app.brainlist.io
- Go to Settings
- Scroll to Danger zone
- Click Delete my account
- Send the confirmation email to support@brainlist.io from the email address tied to your account
- We confirm receipt and process the deletion within 7 business days
Option 3 — No app access
If you can’t access the app or web (e.g. you’ve already uninstalled, or you’ve lost access to the email tied to your account), email support@brainlist.io with:
- Your account email
- A statement that you want to delete your account
- A reasonable proof of identity (we may request one of: a screenshot of a previous BrainList session showing your username, the last digits of a payment method tied to the account, or any other verification we deem reasonable)
We confirm and process the deletion within 7 business days of verifying your identity.
What gets deleted
The following data is permanently and irreversibly removed the moment your deletion is processed:
- Account profile (display name, avatar, email address, password hash)
- All listening progress and completion history
- Saved episodes and playlists (any public-shared playlist URLs become unreachable)
- Topic ratings and reviews
- Quiz attempts and quiz scores
- Contest history and game session participation records
- Friends list (one-way: users who follow you keep their record, but the link to your name is broken)
- Push notification tokens (immediate unsubscribe from all push notifications)
- All API authentication sessions (you are signed out of every device)
- Any subscription grants or beta-access flags
What is retained (and why)
Some data is retained for limited periods because we are legally required to keep it, or because it has been stripped of personal identifiers and cannot be linked back to you:
| Data | Retained for | Why |
|---|---|---|
| Financial transaction logs (Stripe / Google Play / RevenueCat) | 7 years | Tax and audit retention requirements under Canadian law |
| Anonymized analytics events (PostHog) | Indefinite | Already anonymized — keyed only on the now-deleted Django user ID. After deletion, events become orphaned aggregate data with no link back to you |
| Audit log of the deletion itself | 2 years | Proves to auditors and Apple/Google reviewers that the deletion request was honored |
| Server access logs (HTTP, IP addresses) | 90 days | Operational debugging and security monitoring; rotated automatically |
| Backups containing your data prior to deletion | Up to 30 days | Disaster recovery; backups are encrypted at rest and not used for any other purpose. After 30 days, the data is gone from backups too |
If you need a stricter retention guarantee than the above (e.g. immediate purge from backups), email support@brainlist.io and we’ll do our best within the limits of our backup architecture.
After deletion
- Your email address becomes available for re-signup immediately
- You can create a new BrainList account with the same email at any time
- The new account is independent of the deleted one — none of your previous progress, friends, contests, or playlists carry over
Questions
For any questions about deletion, retention, or to request a copy of your data before deletion, contact support@brainlist.io. We respond within 5 business days.
For our broader data-handling practices, see the Privacy Policy.