IMPORTANT NOTICE – DELETION IS PERMANENT AND IRREVERSIBLE

1. Introduction and Scope

This Account and Data Deletion Policy ("Policy") explains how GMX Quantum LLC ("Company," "We," "Us," or "Our") handles account deletion requests for the diAry mobile application ("Service").

This Policy supplements our Privacy Policy and Terms of Service. By using the Service, you agree to this Policy.

2. Your Right to Delete Your Account

You have the right to request deletion of your diAry account and associated personal data at any time, subject to the conditions and exceptions outlined in this Policy.

This right applies to all users globally, including:

• Users in the European Economic Area (EEA), United Kingdom, and Switzerland under GDPR Article 17 (Right to Erasure/"Right to Be Forgotten");
• California residents under the California Consumer Privacy Act (CCPA);
• All other users as a matter of Company policy.

3. How to Delete Your Account

3.1 In-App Account Deletion

To delete your account directly within the diAry app:

1. Open the diAry application on your device;
2. Navigate to Settings;
3. Tap Account;
4. Tap Delete Account;
5. Read the deletion warning carefully;
6. Confirm deletion by entering your password;
7. Tap Confirm Deletion.

Your account and cloud-stored data will be deleted within forty-eight (48) hours.

3.2 Email Account Deletion Request

If you are unable to access the app or prefer to request deletion via email:

• Send an email to [email protected];
• Use the subject line: "DELETE MY ACCOUNT";
• Include: Your full name, email address associated with your account, and reason for deletion (optional);
• We will verify your identity and process the deletion request within thirty (30) days.

4. What Gets Deleted Immediately (Within 48 Hours)

When you delete your account, the following data is permanently erased from our production servers within forty-eight (48) hours:

• Account Information: Your email address, first name, last name, and hashed password;
• Cloud-Synchronized Journal Entries: All journal entries stored on our servers (Elite subscribers only);
• Mood Tracking Data: All mood check-in records and emotional tracking data stored on our servers;
• Subscription Status: Your diAry Elite subscription status (subscription will be canceled immediately; see Section 7 for refund terms);
• AI Usage Logs: Records of AI transcription and companion response requests;
• Settings and Preferences: App settings, notification preferences, and customization data.

5. What Gets Deleted Within 30 Days

The following data is deleted within thirty (30) days of account deletion:

• Backup Copies: Backup copies of your data stored for disaster recovery purposes;
• Cached Data: Cached data stored in content delivery networks (CDNs) or edge servers;
• Session Data: Active login sessions and authentication tokens.

6. What Does NOT Get Deleted (Legal and Regulatory Exceptions)

Certain data is retained for legal, regulatory, or security purposes and will NOT be deleted, even after account deletion:

6.1 Payment Transaction Records (Retained 7 Years)

We retain subscription payment transaction records for seven (7) years to comply with tax, accounting, and financial regulations. This includes:

• Subscription purchase dates and amounts;
• Payment method (last 4 digits of card, if applicable);
• Transaction IDs and receipts from Apple App Store or Google Play Store.

These records are anonymized where possible and cannot be linked back to your journal entries or personal content.

6.2 Customer Support Communications (Retained 3 Years)

Email correspondence, support tickets, feedback, and bug reports submitted to [email protected] are retained for three (3) years for customer service, quality assurance, and legal compliance purposes.

6.3 Anonymized Usage Analytics (Retained Indefinitely)

Anonymized, aggregated usage statistics (e.g., feature adoption rates, session durations, error logs) are retained indefinitely. This data cannot be linked back to your individual account or identity.

6.4 Security Incident Records

If your account was involved in a security incident, fraud investigation, Terms of Service violation, or legal dispute, records related to that incident may be retained for as long as necessary to resolve the matter and comply with legal obligations.

7. Impact on Active Subscriptions

DELETING YOUR ACCOUNT IMMEDIATELY CANCELS YOUR diAry ELITE SUBSCRIPTION.

• No refund will be issued for the current billing period (monthly or annual);
• You will lose access to all Elite features immediately upon account deletion;
• Future billing will stop (no additional charges after deletion);
• See our Refund Policy for complete refund terms.

8. Local Device Data – Your Responsibility

IMPORTANT: Account deletion ONLY deletes data stored on our servers. Data stored locally on your device is NOT deleted automatically.

To fully delete all diAry data from your device:

• iOS: Settings → General → iPhone Storage → diAry → Delete App;
• Android: Settings → Apps → diAry → Storage → Clear Data → Uninstall.

If you do not manually delete the app and clear app data, journal entries stored locally on your device will remain accessible even after your account is deleted.

9. Deletion is Permanent and Irreversible

10. GDPR-Specific Rights (EU/EEA/UK/Switzerland Users)

If you are in the European Economic Area, United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):

• Right to Erasure (Article 17): You may request deletion of your personal data, subject to legal exceptions;
• Right to Restriction of Processing (Article 18): You may request that we restrict processing of your data rather than deleting it;
• Right to Object (Article 21): You may object to processing of your data for specific purposes;
• Right to Lodge a Complaint: You may file a complaint with your local Data Protection Authority if you believe we have not honored your deletion request.

11. CCPA-Specific Rights (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the Right to Delete your personal information, subject to certain exceptions (e.g., transaction records for tax compliance).

To exercise your CCPA Right to Delete, send an email to [email protected] with subject line "CCPA REQUEST – RIGHT TO DELETE".

12. Exceptions to Deletion – When We May Decline a Request

We may decline or delay a deletion request if:

• The request is necessary to complete a transaction, provide a service you requested, or fulfill a contract;
• Retention is required to comply with legal, tax, accounting, or regulatory obligations;
• Retention is necessary to detect, prevent, or investigate security incidents, fraud, or illegal activity;
• Retention is necessary to exercise free speech rights, defend legal claims, or comply with court orders or lawful government requests;
• We cannot verify your identity or confirm you are the account holder.

If we decline a deletion request, we will notify you via email and explain the reason for the denial.

13. Contact Information

For account deletion requests or questions about this Policy, contact:

GMX Quantum LLC
Email: [email protected]
Subject Line: "DELETE MY ACCOUNT" or "DATA DELETION INQUIRY"
Registered Address: Wilmington, Delaware, United States

Response Time: We will respond to deletion requests within thirty (30) days for email requests, or within forty-eight (48) hours for in-app deletions.

Effective Date: March 29, 2026 | Version: 2.0

By using diAry, you acknowledge that you have read, understood, and agree to this Account and Data Deletion Policy.