Delete Your Account

Open Atlas and go to Settings → Subscription and data → Delete account. You will be asked to type a short confirmation phrase, and then deletion of your account and data begins right away. This is irreversible: there is no recovery window and no way to restore the data once you confirm. Your active data is removed from our production systems within 30 days, except the records listed in section 4, and it ages out of encrypted backups on the rolling schedule described below.

If you subscribed through the App Store or Google Play, cancel that subscription in your device's Subscriptions settings as well. Deleting your account here does not cancel a store subscription, and we cannot cancel store subscriptions on your behalf.

If you used Sign in with Apple, after your Atlas account is deleted, also remove its connection in your Apple Account. Atlas cannot remove that connection for you automatically. On iPhone or iPad, open Settings, tap your name, then Sign in with Apple, select Atlas (or SigmaTools), tap Delete, and confirm. You can also manage it at account.apple.com. Follow Apple's instructions. This extra step removes the Apple sign-in connection; it does not replace deleting your Atlas account or cancel a store subscription.

If you have lost access to the app or your device, email privacy@sigmatools.io from the email address on your account, with the subject "Delete my account". Sending from your account email lets us verify the request belongs to you.

We honor verified deletion requests within 30 days. We may ask one or two follow-up questions if we cannot match the request to an account.

We will reply when your account has been deleted. If you used Sign in with Apple, follow the steps in section 1 after that confirmation to remove the Apple sign-in connection too.

When your account is deleted, we permanently remove:

• Your profile (display name, handle, avatar, date of birth, and account email).
• Your workout history: sessions, sets, reps, weights, templates, splits, PRs, achievements, and per-muscle XP.
• Your body measurements.
• Your social data: public profile, followers / following, follow requests, shared routines, and any workout posts and uploaded images. Videos you posted are stored with our video provider rather than in the same store as images; we ask our video provider to delete those as part of the same deletion.
• Your account settings, including your consent and analytics preferences.

Any active subscription managed by us is canceled so you are not billed again. Subscriptions purchased through the App Store or Google Play must also be canceled in those stores.

Any workout history stored only on your device (free tier, before cloud sync) is not on our servers; remove it by deleting the app from your device.

Some data is kept after your account is deleted, where the law requires it or where we have a legitimate need. Each item says how long it is kept, or that it has no fixed deletion date:

• Database backups are kept on a rolling 7-day retention schedule, so deleted data ages out of backups within 7 days of its removal from production. We also keep a separate copy of the photos and profile images you uploaded, which we refresh by hand. A file you deleted is removed from that copy at the first refresh 7 or more days after a refresh first finds it gone, so how long that takes depends on when we refresh.
• Billing and transaction records the law requires for tax and financial compliance. The companies that process payments for us keep these records of your purchases, under their own retention: Stripe for purchases on the web, Apple or Google for in-app purchases, and RevenueCat, which manages in-app subscriptions for us and keeps their purchase history. Apart from the affiliate payment record, the subscription changes in the security and activity log, and the records of membership changes our staff made (all listed below), we do not keep our own copy of your subscription records after your account is deleted.
• If you were paid as an affiliate, a record of each payment we made to you and of any reversal of it (amount, currency and date; payout, transfer and reversal references; affiliate code; the country you gave when you joined; tax-form status; and the reference to your account with our payments partner, but not your name, tax ID or bank details), kept for tax reporting, tax records and legal claims for seven years after the end of the year of the payment, or of a later reversal of it, and then deleted, unless we must keep it longer for an open tax matter or a legal claim.
• If you set up affiliate payouts, the payout account you created with Stripe, including the identity, tax and bank details you gave Stripe, which Stripe keeps under its own retention.
• If you were an affiliate, your former affiliate code and link name, kept so they are never given to someone else. These have no fixed deletion date.
• Minimal records needed to document that your deletion request was received and honored, kept as part of the security and activity log below, for two years.
• A security and activity log of events on your account, such as consent and subscription changes, access to sensitive features, actions our staff took on your account (such as viewing it) and the deletion itself. It can include your IP address and, when we delete an account for you, your email address. It is kept for two years and then deleted.
• Records of what our staff did that involved you, such as a change to your membership or affiliate account, a moderation decision, viewing one of your photos during a safety review, or a founding member invitation (which can include your email address and handle), kept to show what was done and why. These have no fixed deletion date.
• Copyright notices you sent us or that concern content you posted, and how we handled them, kept as the record of each notice. These have no fixed deletion date.
• If an account is closed because its holder is under 13, a one-way coded form of its email address (never the address itself), kept for 365 days so that an account made again with the same email is closed too.
• Records kept by the services we use, under their own retention and tagged with an internal account number rather than your name or email: product analytics (only if you allowed it) and error reports. If you verified a phone number, our text-message provider also keeps its record of the verification text, under its own retention.
• Our email provider's delivery records for emails we sent you and, if an email to you bounced or was marked as spam, its do-not-send entry for that address, kept under its own retention.
• Creator outreach do-not-contact records, including for people who never created an Atlas account: one-way keyed codes derived from a contact email address or a known social platform and handle, the reason contact is blocked, and the dates recorded. These records contain no readable address, handle or message, but remain personal data because we can match the same contact. They survive invitation and account deletion with no automatic expiry, solely to honor outreach opt-outs and declines and prevent repeat contact after a bounce or spam complaint. Separately, we keep coded connections for released invitation unsubscribe links, or older links whose release history is unknown, so they can still work after deletion. These connections contain no readable token and have no fixed deletion date. Connections for new drafts that our invitation tools have never released are removed when the invitation is deleted.
• Messages you sent us, such as a request made by email, kept in our support mailbox so we can answer them and show how we responded. We do not clear that mailbox on a schedule.
• Any material we are legally required to preserve, such as safety or moderation records tied to a violation of our rules, kept only as long as the law requires.
• A minimal age-verification record, such as the age status we derived and a one-way token used to recognize a later age-revocation signal, kept only as long as reasonably necessary for safety and legal compliance.

Aggregated and de-identified data that can no longer be tied to you may be retained for analytics.

You do not have to delete your whole account to remove data. Inside Atlas you can delete individual entries at any time, such as a single workout, a body measurement, or a photo or video you posted. To remove everything at once, except the records listed in section 4, use the account deletion control in your Atlas settings (Subscription and data). There is no separate control that wipes your synced workout data while keeping your account and profile; deleting individual entries is how you do that today.

To have us delete specific data you cannot remove yourself, email privacy@sigmatools.io from your account email and tell us what to delete. We honor verified requests within 30 days. The data you choose is permanently removed; your account and remaining data are kept, and the same backup-retention schedule above applies to the deleted items.