Delete your fufu account

In the app

Open fufu, go to Settings → Delete account, type DELETE and confirm.

Using fufu as a guest, without signing in? Your guest account can only be deleted from the app, on the phone you use it on: Settings → Delete account.

On the website

Sign in with the email address, Google or Apple account you use with fufu, then go to Settings → Delete account, type DELETE and confirm.

What is deleted

• Every profile in your household, with everyone’s allergies, intolerances, diets and other restrictions
• Your scan history, pantry, shopping list and saved recipes
• Your login, your settings, your consent choices and the devices you’re signed in on
• Your customer record at RevenueCat, which handles purchases made in the app
• If you turned on analytics in the app, your usage data at PostHog
• If you signed in with Apple, fufu’s access to your Apple ID

If you pay for fufu on our website: Your web subscription is cancelled straight away, so any time left in the period you’ve paid for is lost.

What is kept

Paddle’s records of web payments. Paddle, who processed any payment you made on our website, is the merchant of record. It keeps your invoices for seven years because tax law requires it, and keeps its own customer record of you — such as your email address and billing details — under its own privacy policy. We cancel any Paddle subscription immediately, but we can’t delete Paddle’s records.

App Store and Google Play subscriptions. If you subscribed in the app, the subscription is between you and Apple or Google. Deleting your fufu account doesn’t cancel it. Cancel it with Apple (your iPhone’s Settings, under your name → Subscriptions) or Google (the Play Store app → Payments & subscriptions).

A record of your consents, for three years. We keep a record of the consents you gave or withdrew — what you agreed to, against which version of our privacy policy, and when — so we can show we asked. It’s stored under a coded reference, without your name, email address or anything else that identifies you, and deleted after three years.

Text-recognition diagnostics, without your account. When fufu reads a label, we record how the reading went: which method was used, the language detected, confidence scores and how long the text was. Never the photo, the text itself or anything about your household. The link to your account is removed when you delete it, and the records themselves are deleted 12 months after the scan.

Scan records that were never linked to you. To improve our checks we keep a record of each scan: the product, up to 2,048 characters of the label text that was read, the result, and the age group, diet and faith rules it was checked against. These records are stored without your account, name or email address, so we cannot find yours to remove them early; they are deleted 12 months after the scan.

Our email provider’s log. Resend, who sends our emails, keeps its own log of the messages we’ve sent you, including the confirmation of this deletion, for a limited time.

If you signed in with Apple, you can check that fufu no longer has access in your Apple ID settings, under Sign in with Apple.

If you can’t do either

Email hello@getfufu.app from the address you use with fufu and ask us to delete your account. A real person reads it, and we’ll confirm once it’s done.