Data Deletion Instructions

Your right under DPDP Act 2023, Section 13 — Right to Erasure

How to delete your account and data

AstraVault provides a built-in 4-step account deletion process. Here's how:

Step 1 — Open Settings

Open AstraVault → tap the ⚙️ gear icon in the top right → tap "Delete My Account".

Step 2 — Biometric Verification

You will be asked to verify your identity using your fingerprint or face unlock. This ensures only you can initiate deletion.

Step 3 — Confirmation

Type the phrase "DELETE MY VAULT" to confirm. This prevents accidental deletions.

Step 4 — 30-Day Cooling Period

Your account enters a 30-day cooling period. During this time:

• Your data remains intact but the app is locked
• You can cancel the deletion at any time by signing back in
• After 30 days, ALL data is permanently and irreversibly deleted

What gets deleted

Data type	Action
All encrypted documents in Google Drive	Permanently deleted
Encrypted search index (index.enc)	Permanently deleted
License file (license.enc)	Permanently deleted
Local SQLCipher database	Securely wiped
Encryption keys in hardware keystore	Destroyed
Firebase Authentication record	Deleted
Firestore consent records	Retained 5 years (legal requirement)

Can't access the app?

If you cannot access the AstraVault app (lost device, etc.), you can request account deletion by email:

Data Protection Board Escalation

If you are not satisfied with our response, you may escalate to the Data Protection Board of India within 90 days of our response.