Account Deletion

Verdica — AI Plant Intelligence Platform

Cat Barn LLC · Boise, Idaho

Last Updated: April 18, 2026 · Effective: April 18, 2026

Your right to be forgotten: You can delete your account and all personal data at any time. Deletion is permanent and irreversible. All encrypted data and encryption keys are destroyed.

1. How to Delete Your Account

You can delete your Verdica account using any of the following methods:

Method 1: In-App (Recommended)

Step 1

Open the Verdica app and sign in

Step 2

Tap your Profile icon (bottom navigation bar)

Step 3

Scroll down and tap "Delete Account"

Step 4

Confirm deletion when prompted. This action cannot be undone. Your data is erased across our databases immediately upon confirmation (typically within seconds).

Method 2: Email Request

If you cannot access the App, send an email to [email protected] with the subject line "Account Deletion Request" from the email address associated with your Google account. We will process your request within 72 hours.

Method 3: Google Account Revocation

You may also revoke Verdica's access to your Google account at myaccount.google.com/permissions. This prevents future logins. To also delete your stored data, follow up with an email to [email protected] with the subject "DELETE MY ACCOUNT" from your registered email.

2. What Gets Deleted

Upon account deletion, the following data is permanently and irreversibly erased from all database tables:

Data Category	What's Deleted	Method
Account information	Email, display name, Google ID, profile data	Personal fields cleared; account deactivated (anonymized tombstone — see §3)
Scan history	All plant scans, species IDs, identification results, feedback	Hard delete from activity.db
Garden & Garden Designer data	All gardens, plants, nicknames, care schedules, companion data, and saved designs	Hard delete; AES keys destroyed
Substance/drug entries	All substance names, dosages, frequencies, notes	Hard delete; AES keys destroyed
Chat messages	All AI Garden Chat conversations	Hard delete; AES keys destroyed
Light Scout data	All light measurements, spot names, readings	Hard delete; AES keys destroyed
Leaf credits & wallet	Your entire Leaf-credit balance and ledger (spent and unspent)	Hard delete from activity.db
Purchase records	Google Play purchase/billing history we hold	Hard delete from users.db
Waiver acceptances	All waiver records linked to your account	Hard delete (see retained-record exception in §3)
Remedy/apothecary data	All saved remedies and preparations	Hard delete; AES keys destroyed
Push notification tokens	All device push tokens	Hard delete

Scope: every database table that holds your personal data is purged during account deletion, except the limited acceptance-proof records described in §3.

Encryption key destruction: All AES-256-GCM encryption keys associated with your account are permanently discarded, rendering any residual encrypted data fragments mathematically irrecoverable.

3. What Is Retained (Limited Exception)

Legal retention exception: For legal-defense purposes, as permitted by GDPR Article 17(3)(e), we retain a limited set of acceptance-proof records after your account is deleted. We do not retain your scans, garden, chat, medications, photos, Leaf-credit ledger, or any other content — only the records described below.

The retained records are:

Agreement & waiver acceptance records — one record for each legal agreement and safety waiver you accepted (so there may be several). Each record contains: your email address (in plain text), an HMAC-SHA-256 hash of your email (a pseudonymized lookup key), the waiver type and version, a SHA-256 hash of the exact agreement text you accepted (cryptographic proof of what you signed), your IP address and user agent (browser/device identifier) at the time of acceptance, and the acceptance and deletion timestamps.
Legal-acceptance proof records — for each version of the Terms of Service, Privacy Policy, and Health & Safety Disclaimer you accepted: the version accepted, a content hash of that version, and the acceptance and deletion timestamps.
An anonymized account tombstone — your account record is deactivated and stripped of personal data (your email, display name, and Google ID are removed and replaced with non-identifying placeholders, and your tier is reset) so the account cannot be re-created or signed back into. The tombstone row itself holds no personal information.

These records are retained for seven (7) years from the date of account deletion, solely to defend legal claims (for example, proof that you accepted our Terms and safety disclaimers). They are never used for marketing, profiling, advertising, or any purpose other than legal compliance. After 7 years, these records are automatically purged.

4. Purchases & Leaf Credits

No subscription to cancel: Verdica is a one-time $4.99 App purchase plus optional one-time Leaf credit packs. There is no subscription and nothing renews automatically, so there is nothing to cancel before deleting your account.

When you delete your account, all of your Leaf credits (spent and unspent) are removed and any features they unlocked are deactivated. Your App purchase and Leaf-credit purchases are tied to your Google account through Google Play; deleting your Verdica account does not by itself request a refund from Google.

Refund eligibility, if any, is governed by the Google Play Refund Policy. Cat Barn LLC does not separately refund Leaf credits you have already spent.

5. Third-Party Data

Account deletion removes all data from Cat Barn LLC's servers. However, data previously shared with third-party services is subject to those services' own retention policies:

Service	Data Sent	Their Retention	How to Request Deletion
Plant.id (Kindwise)	Scan photos (online identification only)	~30 days	Kindwise Privacy Policy
Google Gemini API	AI chat messages; and, only if you use cloud identification or the Garden Designer, your scan photo or yard/garden photo	Up to 30 days	Google Privacy Policy
Replicate	Garden Designer render images (high-resolution upscaling, only when you request a 4K download)	Per Replicate's policy	Replicate Privacy Policy
Google OAuth	Authentication tokens	Per Google terms	Revoke access

All third-party retained data expires automatically within their stated retention periods (typically 30 days). You may also wish to revoke Verdica's access in your Google account settings after deleting your account.

6. Data Export Before Deletion

Before deleting your account, you may request a copy of all your personal data in a structured, machine-readable format (JSON) in accordance with GDPR Article 20 (Right to Data Portability).

To request a data export, email [email protected] with the subject "Data Export Request." We will fulfill your request within 30 days.

Note: Once your account is deleted, data export is no longer possible. Please export your data before initiating deletion.

7. Contact

For questions about account deletion or data erasure:

Cat Barn LLC
Email: [email protected]
Boise, Idaho, United States