Delete your Magic Cookie account and data

Updated: October 15, 2026

You can request deletion without installing or opening Magic Cookie. The verified external method is email. Signed-in users can also use the deletion action in the account profile of the current internal-test build. This page does not display a false success confirmation.

How to submit a request

Send an email to echoyouapp@gmail.com from the email address used for your Magic Cookie sign-in.
Use the subject Magic Cookie account deletion request.
State that you want the Magic Cookie account and associated data deleted. If you used Google Sign-In or email/password, include the sign-in email. Do not send your password, authentication token, payment information or identity document.
We may send a verification message to the account email or ask for another proportionate account detail. Do not share credentials.

Guest and anonymous accounts

If you used only a guest or anonymous account, email us with the approximate date of use and any account identifier visible in the app. The current build does not expose a reliable anonymous account identifier, so remote identification may not be possible until the app is updated. Clearing app data or uninstalling removes local data but does not guarantee deletion of anonymous backend records.

What the request covers

After ownership is verified, the request covers the Firebase Authentication account and account-linked Magic Cookie backend records that can be identified, including miniCookie economy, AI-operation, food and wardrobe records. Local chat history, memories, drafts, care state and settings are stored on the device and can be removed by clearing Magic Cookie app storage or uninstalling the app.

Timing

We acknowledge the request and process it without undue delay. Where GDPR applies, we respond normally within one month after receiving a verifiable request. If a lawful extension applies, we explain it within that period. No shorter operator-specific deletion SLA is currently confirmed.

Retention exceptions

Limited records may be retained where required by law or necessary for fraud prevention, security, dispute resolution, enforcement or establishment of legal claims. We will explain any applicable category and period when responding. OpenAI may retain API abuse-monitoring logs for up to 30 days under its default API policy. We do not claim a fixed Firebase backup-deletion cycle because one has not been confirmed.

How in-app deletion works

The authenticated in-app deletion service removes the Firebase Authentication user, the user’s Magic Cookie backend document and nested records, and reports linked to that user ID. This flow was verified with an isolated test account. Email remains available for people who cannot access the app or their account.