Deleting your data
Yesterself · The web route Google Play's User Data policy asks for, and the in-app one it points at.
If you never turned on sync, there is nothing here to delete
A Yesterself install that has never started the free trial, subscribed, or switched sync on never contacts our servers at all. Not once. There is no account for us to create, no identifier for us to store, and nothing about you in any system of ours. If that is you, this page has nothing to do for you — and the app will tell you the same thing, in the same words, at Settings then Advanced.
Deleting the app removes the journal from your phone, and nothing of it exists anywhere else. Export it first if you want to keep it: Settings then Export, free on every tier, forever.
In the app, in three taps
If you use sync, this is the route, and it is the one that actually erases our copy:
- Open Settings from the top-right of your mail.
- Under Privacy & security, tap Advanced.
- Tap Delete server data, read what it says, and confirm.
It removes your account's public key, every sealed letter, capsule and voice recording we hold, and every device record. It happens immediately and it cannot be undone. It does not touch your phone: your journal, your recordings and your export stay exactly where they are.
Deleting is not the same as turning sync off — there is no sync switch, because sync is simply what Yesterself Post does. If the app keeps running on a subscribed device, it will upload a fresh sealed copy of your journal, and your data will appear to come back. If you want it to stay gone, cancel the subscription in your Apple or Google account first, and then delete. The app says the same thing on the screen, in the same words, after it deletes.
One honest caveat, the same one the privacy policy carries: our encrypted backups roll over on an hourly, daily and monthly schedule, and the oldest monthly copy can be up to 12 months old. Sealed bytes survive there until they age out. Nothing in those backups is readable by us either.
What we keep, and why
Purchase records are kept as financial records after an account is deleted, because tax law requires it — with the link to your account removed. The sync server's logs contain none of your data and are kept 30 days; this website's own access logs are described in the privacy policy. Everything else described above is gone.
If you no longer have the app
We cannot identify you from an email address, and we will not accept one as proof, because doing so would create exactly the account-takeover hole this design exists to avoid. Your account is a public key and the only proof of ownership is a signature made with the matching private key, which never leaves your phone.
So: if you still have the app on any device, or your twelve-word recovery phrase and a fresh install, use the in-app route above — it is one tap and it needs nothing from us. If you have lost both the app and the phrase, then nobody, including us, can open your sealed data ever again; write to hello@khreshitech.solutions and we will explain exactly what remains and what we can and cannot do about it, within 30 days.
This page exists because Google Play's User Data policy requires an app that creates an account to offer a deletion route both in the app and on the web. Ours is a key rather than a login, and the in-app route is the authoritative one. See also the privacy policy and the Terms of Use.