Last updated: 7 October 2026
You can delete your CertSage account and everything associated with it, at any time, for any reason — from inside the app, or by emailing us if you have already uninstalled it. This page explains both routes, what gets removed, and what is kept.
There are two routes. The first is immediate and does not involve us at all.
Profile tab → scroll to the bottom → Delete account.
You are shown exactly what is about to be removed and asked to type DELETE to confirm. It takes effect the moment you confirm — your data is already gone by the time you are signed back out. Nothing is queued, and nobody reviews it.
If you have already uninstalled the app, email us from the address on your account:
support.certsage@integolutions.com
Subject line: Delete my account
Sending from your account's own email address is what lets us verify the request is really yours. If you signed up with Google or Apple, use that same address. If you used Apple's Hide My Email, tell us the relay address shown on your iPhone under Settings → Apple Account → Sign in with Apple → CertSage, since that is the address on your account. If you can no longer access it, write to us anyway and we will find another way to verify you before deleting anything.
In the app — immediately. The deletion runs as you confirm it. There is no review step, no waiting period, and no way for us to reverse it afterwards.
By email — within 30 days. We reply within 7 days to confirm the request came from you, then carry out the deletion and confirm in writing once it is done.
If you have an active subscription, cancel it in Google Play (or the App Store) before deleting your account — we cannot cancel a store subscription on your behalf, and deleting the account does not stop billing by itself. See below.
Everything that identifies you or records what you did in the app:
These are removed together, in one cascading operation. Deletion is permanent and cannot be undone — there is no recovery window and no soft-delete. If you want a copy of your data, ask for an export before requesting deletion.
Five categories of record survive. For the three we hold ourselves, the reference to your account is set to null. The two held by our diagnostics and analytics providers are not altered at all — they simply age out on their own schedule. We describe each precisely rather than calling them all anonymous, because only the first of them is: four are pseudonymous, and the last can still contain something you typed.
| Record | What happens to it | Why |
|---|---|---|
| AI usage and cost logs | The reference to your account is set to null. What remains is a model name, token counts, a cost and a timestamp — with no way to attribute it to you. | Cost history has to stay accurate after accounts close, or the service cannot be costed at all. |
| Billing event logs | The reference to your account is set to null. The stored copy of the original event from our subscription provider still contains the internal identifier your account used, so these are pseudonymous rather than anonymous — we keep the event exactly as it arrived. | Required for tax, accounting and resolving payment disputes, which can only be reconstructed from the original event. |
| Crash and performance reports | Reports created before you deleted your account stay with our diagnostics provider (Sentry) until their 90-day retention expires, then delete automatically. They are keyed to the same internal identifier, so these are pseudonymous too. Ask us and we will delete them sooner. | They exist to diagnose faults. We cannot fix a crash we can no longer see, and the window is short and self-clearing. |
| Product analytics records | Nothing is set to null here. Deleting your account stops further activity being attributed to you, but the record already held by our analytics provider (PostHog) stays as it is until its 1-year retention expires, then deletes automatically. It is keyed to the same internal identifier, so it is pseudonymous too. Ask us and we will delete it sooner. | Knowing which features people use, and where they get stuck, is how the app gets better. It holds no message, quiz or article text. |
| Reports you sent us | The reference to your account is set to null, but the report itself is kept — the words you wrote, and for a wrong-question report the question and the answer you gave. That makes it pseudonymous, and it is the one surviving record that can contain something you typed. Ask us and we will delete it, and the copy in our support inbox with it. | A report may still describe a fault we have not fixed yet. Deleting it would destroy the only record that we were ever told, and a wrong question would go on being asked. |
Four of the five contain nothing you wrote. What they retain is an internal identifier — the same one your account used — with nothing left beside it that maps back to a person, plus, in the analytics record, figures about your studying and only figures: that a session started or finished, that an answer was right or wrong, an exam score, a readiness percentage. Never the question those figures came from, never your messages to the coach, and never your name or email address.
A report you sent us is the exception, because it is your own writing by definition. The stored report has no field for your name or your email address — those travel with the email rather than into the record — but anything you typed into the message stays in the message, including an address or a name if you put one there. The copy that reached our support inbox keeps whatever the email carried, which does include the address we would have replied to. Ask us and we will delete both.
Separately, our providers keep their own records under their own policies and retention schedules — Google Play for purchases, RevenueCat for subscription state, Make (make.com) for the delivery of any report you sent us, and Google's Firebase Cloud Messaging for the push token and installation ID of any device you allowed notifications on. We can ask them to delete on your behalf but cannot do it directly.
Deleting your CertSage account does not cancel your subscription and does not issue a refund. Store subscriptions are managed entirely by the store, not by us:
Refunds are handled by the store under its own policy. Cancel first, confirm the cancellation has taken effect, then request deletion.
support.certsage@integolutions.com
Publisher of CertSage · Australia