Account & Data Deletion
This page explains how to delete your Shapo account, what is deleted, and what — if anything — is kept. It applies to the web app and to the iOS and Android apps, which share the same accounts.
1. Delete your account from within the app
- Sign in and open Account (the person icon in the top bar; on a wide screen, the Account link at the foot of the side menu).
- Under Your data, tap Delete account.
- Confirm. On the web you are taken to a confirmation page — tick the box and press Delete my account permanently.
The account and its data are deleted immediately, you are signed out, and the sign-in details stop working. There is no waiting period and no way to undo it.
2. Delete without access to the app
If you can no longer sign in — a forgotten password, a removed app, a lost device — send an e-mail to shapo.app@gmail.com from the e-mail address of the account, with the subject "Delete my account". We may ask you to confirm the request from that address to make sure it is really you. We will delete the account within 30 days and confirm by e-mail.
3. What is deleted
- Your sign-in identity: e-mail address, display name, password hash, linked third-party sign-in logins and any token a sign-in provider issued to us, lockout and security records. Where the provider supports it, we also ask it to disconnect Shapo from your account with it.
- Everything held for your account on our servers: shopping lists, saved baskets, comparison reports and their history, order records, saved addresses, plan and notification settings, the encrypted secure store (store logins, store session tokens and payment details you chose to save), and your consent record.
- In the native app: the same data stored on the device, and the sign-in tokens held in the secure store.
4. What is not deleted, and why
- Orders placed at a retailer. A purchase you completed on a retailer's website or app is held by that retailer, under its own policy. Manage or delete it with the retailer; we never had it.
- Your account with a sign-in provider. If you signed in through a third-party sign-in provider, deleting your Shapo account disconnects the two; it does not delete your account with the provider.
- Server logs. Technical logs (IP address, time, requested address, errors) are kept for security and troubleshooting for a limited period and then deleted; they are not used to rebuild your account.
- Backups. Copies of our data in backups are overwritten in the normal backup cycle, within 30 days.
- Aggregated statistics that no longer identify anyone.
- Records we are required by law to keep, for as long as the law requires.
5. Deleting some data only
You do not have to delete the whole account to remove something. Inside the app you can delete individual lists, baskets, order records, saved addresses, saved store logins and saved payment details, and Settings → Clear All Cache removes the app's local data on that device. A request for access to, or correction of, your data can be sent to shapo.app@gmail.com — see the Privacy Policy.
6. Questions
Write to shapo.app@gmail.com. The current version of this page is always at https://shapo.store/legal/delete-account.