Account & Data Deletion

Last updated: June 2026

My Within is a mobile & web application published by Inside Out Harmony e.U. (Außerlitzstraße 10a, 6780 Schruns, Austria — VAT ATU82926238). This page explains how you can request deletion of your My Within account and the personal data associated with it.

1. How to request account deletion

You have two equivalent ways to delete your My Within account:

Option A — From inside the app (recommended, instant)

1. Open the My Within app.
2. Sign in with the account you want to delete (skip if you are already signed in).
3. Go to Profile (bottom right tab).
4. Scroll down to the red Delete my account button.
5. Tap it, then confirm by tapping Confirm in the two-step confirmation dialog (you have 48 hours to confirm; this prevents accidental deletion).
6. You will be signed out immediately and your data will be removed as described below.

Option B — By email

Send an email to privacy@my-within.com from the address associated with your account, using the subject line “Account deletion request”.

Include the email address of the account you want deleted. We will verify that the request comes from the account owner (usually by replying to the original email address on file) and process the deletion within 30 days, in accordance with Article 17 GDPR.

2. What is deleted

Upon deletion, the following personal data is permanently erased from our production database and from our encrypted daily backups within 30 days of the request:

• Your account profile (name, email, hashed password, chosen role, language).
• Every journal entry (text and voice) you ever wrote.
• All WEVA / EVA analyses and Deep Within answers (Goals, Comfort-zone, Coping).
• Mood ratings, breathwork session records, streaks and reminders.
• Coach chat messages and 1:1 session bookings you made.
• Device push-notification tokens.
• All product-analytics events linked to your account (PostHog EU).
• All support-chat conversations you had with us.
• Your entry from every coach circle you joined.

3. What is retained (and why)

A small amount of data is retained beyond the deletion date only where required by law or to protect Inside Out Harmony e.U. from fraud. This data is stored separately from the deleted profile and cannot be re-linked to your identity:

• Invoicing and billing records — retained for 7 years as required by Austrian tax law (§ 132 BAO) and EU VAT rules. These records contain the transaction ID, amount, VAT and Inside Out Harmony e.U.’s tax data — they no longer link back to your personal profile after deletion.
• Anonymised aggregate metrics (e.g. “1 234 users completed a WEVA in March 2026”) — retained indefinitely for statistical purposes. These aggregates cannot be traced back to any individual user.
• Security logs that show your account was deleted — kept for 90 days after deletion to allow investigation of abuse or account takeover attempts. After 90 days these logs are automatically purged.

4. Third-party services (sub-processors)

When you delete your account we also propagate the deletion to every sub-processor that holds your data on our behalf. Concretely:

• Hetzner Online GmbH (Helsinki, FI) — hosting: data removed from primary DB and next backup cycle.
• Sentry.io EU (Frankfurt, DE) — error events: purged automatically after 90 days.
• PostHog EU (Frankfurt, DE) — product analytics: your distinct_id is deleted; anonymised events are retained.
• Firebase FCM (Ireland/EU) — push tokens: revoked immediately.
• Resend — transactional email: your email is removed from suppression & audience lists.
• Stripe / RevenueCat — payment records: retained for tax purposes as described above; personal identifiers are pseudonymised where not required by law.

5. Cancelling an active subscription

Deleting your account does not automatically cancel an auto-renewing subscription that was purchased through Apple App Store or Google Play. If you have an active subscription:

• iOS — open the App Store app → tap your profile → Subscriptions → select My Within → Cancel Subscription.
• Android — open Google Play → tap your profile → Payments & subscriptions → Subscriptions → select My Within → Cancel subscription.
• Web — sign in on my-within.com → Profile → Billing → Cancel. You can also email us to cancel manually.

6. Timeline & confirmation

• In-app deletion: immediate sign-out, data purge within 30 days.
• Email-based deletion: we confirm receipt within 72 hours and complete purge within 30 days.
• You will receive a confirmation email at your on-file address once the deletion is complete.

7. Contact

Data controller: Inside Out Harmony e.U., Außerlitzstraße 10a, 6780 Schruns, Austria — VAT ATU82926238.
Data-protection contact: privacy@my-within.com.
Supervisory authority (in case of complaint): Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, Austria — dsb.gv.at.