Delete your RomboRide account

In the app

You need to be online, and signed in to the account you want to delete.

Open "Profile", then "Your account", and tap "Delete account".
The first step says what deleting does. Your routes and rides stay on this phone, but a new account starts empty, so save them first with "Export from this phone first", or tap "I already have my data". Then tap "Continue".
The second step asks once more. Tap "Delete my account", or "Keep my account" if you change your mind.

The app then shows the day on which we delete your data. Signed in on more than one phone? Deleting on one is enough: the others are signed out at once.

By email, without the app

No longer have the phone, or the app? Write to info@romboride.com from your account's email address, the one the app shows under "Profile", "This phone", and ask us to delete your account. We then write back to that address to confirm, and delete your account once you answer: that is how we know the account is yours.

We delete it exactly as the app does, and tell you the day on which we delete your data.

What happens, and when

At once, the account can no longer be used on our server. Every phone and browser signed in to it is signed out, nobody can sign in to it or reset its password, everything that needs it is refused, the Sunday Button, pass reports and the export included, and nothing new is recorded under it. This cannot be undone.

For 30 days the account is marked as being deleted. On day 31 we delete everything that carries its ID:

your profile and your badges
your Dream Trips, with every version of them
your recorded rides, every part of them with its positions
your bikes and your privacy zones
your Sunday Button presses
the record of changes your phones sent, and your data exports
how you sign in: your password's hash, your Google link, your second sign-in step, your sessions and any email link, and then the account itself, with your email address

On your phone, your routes and your recorded rides stay, and the app keeps working with what it holds. Removing the app deletes them from the phone.

What we keep, and why

Your pass reports, without your ID. They are road information other riders rely on, and once your ID is removed nothing on our side links them to your account.
Records of admin actions about your account, such as a block and its reason, or the deletion itself. They hold the account's ID but no email address, name or location, and we keep them without a time limit, on purpose: they are the proof that your account was deleted when you asked.
The deletion job's own record: the account's ID and how many items of each kind it deleted. It is deleted after 90 days, unless it is still that job's latest run, or its latest successful one.
Our server logs. They hold IP addresses, and a few lines hold an account's ID, but they cannot be searched by account, so they are not deleted with it. The app service's log is deleted at every update; our web server's log is limited by its size, not by time, so it can reach back months.
A snapshot of the whole server, if we took one before an update while your data was still there. We delete it within 7 days, once the update is working.
If you wrote to us: your messages about the deletion, and our answers. We delete them by hand, at the latest 90 days after our last answer. A problem report you sent us keeps its own rule: deleted at the latest 90 days after the problem it reports is closed, or at once if you ask.
What other services keep in their own logs. Brevo, which sends our emails, keeps its log of the emails it sent you for one month. The services we ask for routes, weather and places see what we asked them, but no ID of yours: GraphHopper (routes) keeps its logs for up to five weeks, Open-Meteo (weather) for 90 days, and komoot (place search) does not say. The privacy policy names each one.

Without an account

Without an account, nothing on our server carries your name or email address, so there is no account to delete. On your phone, under "Profile", tap "Delete everything on this phone"; to keep your routes and your recorded rides, save them first with "Export from this phone". Removing the app also deletes what it stored.

What our server holds under the random ID the app was given (the ID, its sessions and its Sunday Button presses, whose start points are erased one week after their month ends) is deleted in our weekly clean-up 90 days after it was last used. If it pressed the Sunday Button, it stays until those records are gone, up to about 15 months after its last press. Deleting everything on your phone does not delete it.

To have it deleted now, write to info@romboride.com and send us the ID the app shows under "Profile", "This phone", "Identity". We delete everything held under that ID within a month, and write back when it is done.

Deleting only some of your data

You do not have to delete your account to delete something in it:

A Dream Trip, a bike or a privacy zone: delete it in the app. Its content goes from our server at once; a small marker (its ID, its dates and a few details) stays until your account is deleted, so that your other phones learn it is gone. If the Dream Trip was a Sunday Button loop, the loop also stays in that press's record until one week after its month ends.
A recorded ride: under "Trips", then "Ridden", tap "Delete" beside it (or "Delete this ride" on its page); a joined ride is deleted with every ride in it. It goes from your phone at once, and from our server the next time your phone syncs your account; if another of your phones recorded it, that phone deletes its own copy when it next syncs. A small marker (its ID, which still tells when the ride was made, when it was deleted and its sync number) stays until your account is deleted, so that your other phones learn it is gone.
A problem report you sent us: write to us, and we delete it at once.
The problem log on your phone: under "Profile", then "Report a problem", clear it or switch it off.

The privacy policy has the full detail: how long we keep what, and all your rights.