Account and data deletion

1. Overview

Recovery is local-first. Journal notes, Health Connect imports, daily briefs, and readiness aggregates are processed and stored on your device only. They are not uploaded to Recovery servers.

The only optional off-device personal data Recovery may use is a coaching sign-in. That sign-in sends email and auth tokens only to check a health_app_access entitlement. Optional Pro purchases are processed by Google Play.

2. Delete local Recovery data in the app

Use this to wipe Recovery's on-device copies and keep the app installed.

Steps

1. Open Recovery on your phone.
2. Open Settings.
3. Open the Data & privacy section.
4. Tap Delete local data.
5. Confirm in the dialog.

What Delete local data removes on this device

• Check-ins and journal entries, including notes, tags, ratings, and the optional medication-context field
• Personal experiments
• Cached daily briefs
• Health Connect provenance summaries
• Imported measured Health Connect rows cached by Recovery
• Derived nightly readiness aggregates
• Local export cache used for share and export features
• SharedPreferences on this device
• The app Keystore field-encryption key
• Scheduled WorkManager work
• The local coaching session
• The local Play Pro flag. The purchase is not cancelled, and a later Play query can restore the flag
• Onboarding completion, so the next start is onboarding

Delete local data asks the paired watch to drop the synced readiness item. A derived watch payload can remain if that retract does not succeed.

Optional targeted clears

• Clear cached daily briefs only. This removes the brief cache and leaves journal and Health Connect imports in place.
• Clear personal experiments only. This removes experiments and leaves other local data in place.
• Delete a single check-in. Do this from the journal entry. It removes that local timeline entry only.

3. Sign out of optional coaching access

1. Open Recovery.
2. Open Settings.
3. Open Account & Pro access.
4. Tap Sign out.

Sign out clears the local Supabase coaching session, including access and refresh tokens, and the short-lived entitlement cache on the device. It does not clear a Google Play Pro/lifetime purchase flag. It does not cancel or refund a Play purchase.

4. Delete an optional coaching account

Coaching sign-in is optional. If you used email magic-link or one-time code sign-in, you can request removal of Recovery app access or deletion of your whole coaching account. The coaching account is shared with the coaching service; it can include client records beyond Recovery authentication and entitlement data. See the coaching privacy policy.

1. If you are still signed in, sign out in the app. See section 3.
2. Email coaching@ptadamjames.com from the address associated with the coaching account.
3. Use a subject such as Recovery coaching account deletion request. State whether you want Recovery app access removed or your whole coaching account deleted. We will confirm the scope with you before deleting the shared account. Removing app access alone does not delete your coaching account or coaching client records.
4. We aim to process complete requests within 30 days.

Recovery uses email, session tokens and entitlement responses. The wider coaching service may hold other client records. Deleting its shared Supabase Auth user affects the whole coaching account and requires a separate, confirmed request. Recovery does not transmit Health Connect rows, journal text, or measured values to the entitlement check.

5. Revoke Health Connect permissions in Android system settings

Android and Health Connect manage Health Connect revocation. Recovery does not include an in-app revoke button.

1. Open your phone's system Settings.
2. Open Health Connect. The path may vary by Android version or phone maker.
3. Open App permissions or the equivalent screen.
4. Select Recovery.
5. Revoke individual categories or all access.

After revocation, Recovery runs a foreground refresh. If that refresh finds no granted categories, Recovery wipes its local Health Connect import cache and derived nightly aggregates on the device.

Revoking permissions does not delete the original data inside Health Connect or in the wearable and source apps that wrote it.

6. Uninstall Recovery

Uninstalling Recovery from your phone removes Recovery's local app-private databases on that device. That includes journal, experiments, briefs, provenance, measured import cache, derived aggregates, and local prefs. Local prefs include coaching tokens and Pro flags stored by the app.

Uninstall does not delete Health Connect source records. It does not cancel Google Play purchases. It does not delete an off-device coaching auth account by itself. Use section 4 for that request.

Wear OS surfaces show derived scores, labels, energy/stress ratings and up to 7 days of dated history from the phone. Those surfaces become unavailable or stale when you clear the phone data or remove the app. The latest derived glance payload may remain on a paired watch or in Wear Data Layer platform state. To remove it, clear Recovery's watch app data or uninstall Recovery from the watch. You can also unpair the watch if appropriate.

7. Data the developer cannot delete

8. What is not uploaded

Recovery does not upload the following to Recovery servers:

• Health Connect measured rows
• Journal and check-in text or ratings
• Personal experiment content
• Readiness scores, daily brief content, or derived aggregates

There is no remote health-data wipe for that content. It is not on Recovery servers.

Optional coaching sign-in may send email and auth tokens over HTTPS only to authenticate and read a health_app_access boolean. That is not a health-data backup.

Optional in-app export uses the Android share sheet. You choose any destination. That is not an upload to Recovery servers.

9. Contact

For coaching-account deletion requests or questions about this page, email coaching@ptadamjames.com.

We aim to process complete coaching-account deletion requests within 30 days.

Privacy Policy: https://www.ptadamjames.com/recovery/privacy