You can delete your Korassa account at any time — in a few taps inside the app, or by email if you can no longer reach it. This page explains exactly how to do it, what is permanently removed, what we are legally required to keep, and how long each step takes.
It is published by the operator of the Korassa mobile application to satisfy the account-deletion requirements of Apple App Store Review Guideline 5.1.1(v), the Google Play Data deletion policy, and Article 11 of the Egyptian Personal Data Protection Law No. 151 of 2020 ("PDPL"), together with the equivalent rights under the GDPR and the CCPA/CPRA where those apply to you.
1. Two Ways to Delete Your Account
1.1 In the app — recommended, and immediate
Open Korassa → Settings → Account → Delete Account → Continue → Delete My Account
You need to be connected to the internet. The app confirms twice on purpose: the first screen explains what deletion does, the second is the final confirmation, so that no account is closed by an accidental double-tap.
Your account is closed the moment our server confirms the request. Only then is the copy of your data on your phone erased — if the server cannot be reached, nothing is deleted and you can safely try again later.
1.2 By email
Email privacy@korassa.com with the subject line "Account Deletion Request".
Write from the email address registered to your account. We verify that you control that address — usually with a one-time code — before we act on the request, and we complete the deletion within 30 days of that verification.
Use this route if you have uninstalled the app, lost access to your device, or cannot sign in.
Both routes have the same result. Neither requires you to send documents, screenshots, or attachments of any kind — Korassa accepts text only, in the app and in a deletion request alike. Anyone asking you for photographs of identity documents in Korassa's name is not us.
2. Before You Delete — Cancel Your Subscription First
Deleting your Korassa account does not cancel a paid subscription.
Subscriptions are billed by Apple or by Google, not by us, and can only be cancelled in the store where you bought them. If you delete your account without cancelling first, that store will keep charging you — and once the account is gone we cannot cancel it on your behalf.
- iOS / iPadOS: Settings → your name → Subscriptions → Korassa → Cancel Subscription
- Android: Google Play Store → your profile icon → Payments & subscriptions → Subscriptions → Korassa → Cancel subscription
Refunds are governed by Apple's and Google's own policies. We cannot issue, reverse, or refund a store charge.
3. What Deletion Does
Deletion is permanent and cannot be undone. You are signed out on every device immediately, and you will not be able to sign in again with the same email address, Google account, or Apple ID. Those credentials are released, so you may sign up again later — but as a brand-new account with an empty ledger. There is no restore, no grace period, and no way for us to bring the old account back.
3.1 Removed permanently
We erase, or overwrite beyond recovery, all of the following:
- Your identity — email address, name, password, the link to your Google account, the link to your Apple ID, your subscription-platform identifier, and your "remember me" token;
- Your profile identifiers — username, last name, and mobile number;
- Other people's details that you entered — the names, phone numbers, and notes of anyone you recorded in the lending tracker are replaced with a neutral placeholder, so a third party's data does not survive your account;
- Your name where other users can see it — in every shared category you host, joined, or invited someone to, your display name is replaced with "Deleted user";
- Push-notification tokens — deleted outright, so no device continues to receive notifications for the account;
- Every session token — revoked, on every device, including ones you no longer have;
- Your Sign in with Apple grant — the refresh token is revoked directly with Apple through Apple's REST API, then deleted from our side, as Apple requires;
- Identity audit records — the internal change-history rows that contain your name, email, or phone number are deleted, not merely hidden; and the IP address, device user-agent, and request URL are stripped from every audit record that remains;
- Everything on your phone — the app's entire local database for your account is deleted from the device, along with the stored session.
4. What We Keep, and Why
Korassa is a financial-record product, so full destruction of every row is not possible for us and would break obligations that sit outside data-protection law. What we do instead is sever the link between the records and you: the identifiers listed in Section 3.1 are destroyed, and what remains carries no name, email address, or phone number and is not attributable to you as an individual.
| What is kept | In what form | Why |
|---|---|---|
| Your financial entries — transactions, recurring expenses, loans, ROSCAs (جمعيات), investments, lending amounts, strategic purchases, budgets, and spending patterns | De-identified. The amounts and dates remain; nothing that names you does | Accounting integrity and long-run product statistics; these rows carry no identity once the account is closed |
| The onboarding answers behind those figures — for example gender, date of birth, employment type, housing situation, and income range | De-identified, and detached from the account | They are what makes the retained statistics meaningful. They are never re-linked to a person, and we do not use them to contact or profile you |
| Usage and onboarding events, and monthly cashflow counters | De-identified | Product analytics |
| Subscription and invoice records | De-identified accounting records | Retained for at least 7 years, as Egyptian Tax Law and Egyptian Commercial Law record-keeping obligations require. Deleting them to satisfy a privacy request would breach a different legal duty |
| Aggregated statistics | Aggregated with a k-anonymity threshold of k ≥ 20 — no visible aggregate ever represents fewer than twenty users | Product analytics; cannot be resolved to an individual |
| Marketing-consent withdrawals (suppression list) | A hashed record of the opt-out | So that an opt-out is still honoured if the same address is ever re-subscribed |
We do not sell this data, and we do not share it with advertising networks, data brokers, or scoring agencies — before or after deletion. Retention periods are set out in full in Section 9 of our Privacy Policy.
5. Timeline
| When | What happens |
|---|---|
| Immediately on confirmation | The account is closed; every session is revoked; the Sign in with Apple grant is revoked with Apple; identifiers are scrubbed; push tokens are deleted; the app's local database on your device is erased |
| Within 30 days | Cold backups containing your identifiers are rotated out and purged |
| Within 30 days (email route) | An emailed request is verified and carried out, counted from the day we confirm your identity |
| After 7 years | De-identified invoice and tax records are deleted, unless a longer period is required by law at that time |
6. Guest Accounts
If you use Korassa in guest mode without giving an email address, your account is identified only by a pseudonymous code and there is no address for us to verify you against. Two consequences follow:
- Deletion works the same way in the app (Settings → Account → Delete Account), and removes everything on the device;
- The email route in Section 1.2 is not available to you, because we have no way to establish that a guest account is yours. If you uninstall the app without deleting first, contact privacy@korassa.com with the pseudonymous identifier shown in the app and we will do what we can.
You can convert a guest account into a full account at any time by adding an email address and a password, which also gives you the email deletion route.
7. If You Do Not Want to Delete Everything
Deletion is not the only option, and it is the only irreversible one. You may instead:
- Export your data — take a machine-readable copy with you before you go;
- Correct your data — most profile fields are editable directly in the app;
- Withdraw a consent — including for any optional sensitive field you chose to enter, without closing the account;
- Stop marketing messages — unsubscribe from any marketing email, or turn the notifications off in the app, and keep your account;
- Simply sign out — signing out leaves your account intact and is completely reversible.
These rights, and how to exercise them, are described in Section 10 of our Privacy Policy.
8. Questions and Complaints
| Subject | |
|---|---|
| Account deletion and data-rights requests | privacy@korassa.com |
| General support | support@korassa.com |
| Security incidents | security@korassa.com |
| Data Protection Officer | privacy@korassa.com |
If you are not satisfied with how we have handled your request, you may lodge a complaint with the Egyptian Personal Data Protection Centre (PDPC), or — where it applies to you — with your local EU/EEA supervisory authority, the UK Information Commissioner's Office, or the California Attorney General.
9. Publisher
| App | Korassa / كراسة |
| Publisher / Data Controller | Osama Mohamed Sharkawy (operating individually as "Korassa") |
| Registered Office | New Cairo, Cairo, Arab Republic of Egypt |
| App-store distribution | Distributed under the developer account of Bright Flag Technology Solutions LLC (علم الساطع لتقنية المعلومات), Dammam, Saudi Arabia, acting as our publishing services provider and data processor only. It has no role in account deletion. See Section 7.1 of our Privacy Policy. |
| Data-rights contact | privacy@korassa.com |
See also our Privacy Policy and our Terms of Use.