Account Deletion
FlightFlow complies with Apple App Store guideline 5.1.1(v). You can terminate your account and remove all associated flight data from inside the app at any time.
How to delete your FlightFlow account
Open FlightFlow on your iPhone → Settings → Account → Delete Account.
Confirm the deletion in the dialog. FlightFlow calls DELETE /api/v1/account with your signed-in bearer token. The backend terminates your account, revokes every session and clears your email / phone / Apple ID so you (or anyone else) can re-register the same identifier later if you wish.
What FlightFlow deletes immediately
When you tap Delete Account, the following are removed or terminated within seconds:
- Account information — your email, phone and Apple ID are cleared on the user row.
- Sessions — every active session for your account is revoked. Your existing bearer tokens stop working within seconds.
- Memberships — your membership rows are marked as "left"; you no longer appear in any organisation member list.
What FlightFlow keeps (until the retention sweep)
For operational continuity and to preserve audit history, the following rows are kept on the backend server in a soft-deleted state until the next retention sweep:
- Aircraft data — aircraft rows tied to your personal organisation are kept but inaccessible (you can no longer authenticate, so the iOS client never sees them).
- Flight tasks & flight records — task rows and the per-leg record rows are kept but inaccessible for the same reason.
- User settings & pilot profile — kept but inaccessible.
- PDF exports — kept on the backend storage; can be requested for audit by emailing Koncege@163.com.
A retention sweep (configurable, default 30 days) then physically deletes the rows above. The audit-log rows themselves are not deleted while your user row remains in the deleted state, so that we can answer any operational dispute.
What FlightFlow deletes on your device
The FlightFlow iOS app also clears its on-device Keychain and the app's secure container immediately after a successful DELETE /api/v1/account. Specifically:
- JWT bearer token + refresh token (Keychain).
- Signed-in user / org / admin flag (UserDefaults).
- Agreement version / accepted-at timestamps.
- Local cache of aircraft, task and settings JSON.
If you had previously been using FlightFlow without an account (local-only mode), your local flight data is removed from the device when you tap Settings → Account → Delete Account on a fresh app session, or when you uninstall FlightFlow.
How to request data export before deletion
- Open FlightFlow → Settings → Export and choose PDF dispatch release or Backup bundle.
- Save the resulting file to your device or share it to a destination of your choice.
- Proceed with the Delete Account flow once you have a copy.
You can also email Koncege@163.com to request an export of any data we still hold after the retention sweep — we will provide it within 30 days.
What happens to your identifier after deletion
After DELETE /api/v1/account:
- Your email, phone and Apple ID are cleared on the user row.
- The same identifier (email or Apple ID) can be re-registered by anyone — including you — as a brand-new FlightFlow account. The freed identifier is treated as fresh, not as a re-bind of the deleted account.
- Your previous data does not reappear after re-registration.
What is NOT deleted
- Records we are legally required to retain (e.g. tax invoices if you have ever purchased FlightFlow Pro) — retained for the legally required period only.
- Anonymised, aggregated service-quality statistics (e.g. "average W&B envelope utilisation") — these contain no personally identifying information.
Questions?
Contact: Koncege@163.com · Project Lead, FlightFlow.