Account and Data Deletion

1. How to initiate deletion

Sign in to the MedaStaré application and open Settings > Account > Delete Account. Review the deletion notice, complete any proportionate reauthentication or confirmation step presented by the app, and confirm deletion.

The deletion option is intended to remove the account itself, not merely pause, hide or deactivate it. MedaStaré may use a confirmation or reauthentication step to reduce accidental or unauthorized deletion.

If you cannot access the app, you may start a deletion request using the process in Section 11 below. MedaStaré may verify that the request comes from the account holder before acting on an account-specific request.

2. What the deletion workflow removes

Subject to technical dependencies and the retention exceptions in Section 4, the current deletion workflow is intended to remove or disconnect the following MedaStaré account data:

• The MedaStaré account and active account database records covered by the deletion workflow.
• Profile information, preferences and profile media.
• Wardrobe items, wardrobe media, saved outfits, StyleTrack entries, personalization history and related user-owned records.
• Account-linked body, beauty, nail, style and personalization records covered by the user account data model.
• AI chat history, prompts, saved AI results and account-linked analysis history stored by MedaStaré where those records are part of the deletion workflow.
• User media stored under the account's storage area, including the account-specific storage prefix used for uploaded media.
• Stored coarse-location or weather-personalization fields associated with the account where they remain present.
• Notification and session-related account data covered by the deletion workflow.
• Private social/account content that exists solely as part of the deleted account, subject to the public-content, moderation, transaction and legal exceptions below.

Deletion of a MedaStaré account does not itself delete information that another user independently created, copied or stored outside MedaStaré, or information controlled independently by Apple, Google, Stripe or another third party.

3. Current deletion timing

Under MedaStaré's current production technical configuration, active database deletion and active storage deletion are designed to occur immediately when the confirmed account-deletion workflow completes.

Deleted media may remain recoverable within Google Cloud Storage's current soft-delete layer for up to approximately seven (7) days. That recovery layer is not used as an active MedaStaré account and is not intended for ordinary product use.

The current technical inventory does not identify a separate Firestore backup copy that creates an additional account-data deletion delay. If MedaStaré later enables database backup, point-in-time recovery or another recovery system, the applicable retention disclosure will be updated to reflect the production configuration.

4. What may be retained

Deleting an account does not require MedaStaré to erase information that it is legally permitted or required to retain. MedaStaré may retain only the information reasonably necessary for an applicable purpose, including:

• Store transaction, entitlement, refund, revocation, accounting or tax records needed to document purchases, restore or reconcile transactions, comply with law or resolve disputes.
• Creator payout, transfer, accounting and tax records where a creator or payee relationship existed.
• Security, fraud-prevention, abuse, trust-and-safety, moderation or incident records where retention is reasonably necessary to protect users, the Service or legal rights.
• Reports, blocks or enforcement evidence where deleting the record would materially impair the safety of another user, an abuse investigation or enforcement history.
• Consent records, privacy-request records, deletion evidence and audit records reasonably necessary to demonstrate user choices, administrative actions or legal compliance.
• Records preserved because of a valid legal hold, court order, regulatory obligation, investigation, unresolved dispute or the establishment, exercise or defense of legal claims.
• Limited MedArena, challenge, eligibility, reward or winner records where required to administer completed events, investigate fraud, satisfy Official Rules or comply with tax or legal obligations.
• Information that has been irreversibly anonymized or aggregated so that it no longer identifies the user.

Retaining a limited record for one of these purposes does not keep the MedaStaré account active and does not authorize unrelated use of the retained information. Where practical, retained records may be separated, restricted, minimized or de-identified.

5. Third-party providers and AI services

MedaStaré uses service providers for infrastructure, authentication, AI processing, media generation, moderation, analytics and other functions. Deleting your MedaStaré account removes data from MedaStaré-controlled active systems as described above and may also require provider-side action depending on how the provider processed the information.

Where a service provider stores personal data on MedaStaré's behalf and a provider-side deletion request is technically supported and required, MedaStaré will use the applicable deletion process or allow the provider-managed retention period to expire. Provider systems may retain limited information for security, fraud prevention, legal compliance, abuse prevention, debugging or other lawful purposes under the provider's applicable terms and legal obligations.

For AI features, deleting the MedaStaré account does not mean that MedaStaré can retroactively erase an output from a model that was not stored as an account record, or force deletion of a provider record that the provider is independently required or permitted by law to retain. Provider-specific processing and retention information is described on the AI Data Processing and Subprocessors pages.

MedaStaré does not treat an account deletion request as permission for a third party to continue using the user's private content for unrelated purposes.

6. Apple App Store and Google Play subscriptions

Apple App Store. If you purchased a MedaStaré subscription through Apple, deleting the MedaStaré account does not automatically cancel the App Store subscription. Use Apple's subscription-management tools to stop future renewal. App Store refunds are handled under Apple's applicable refund process and policies.

Google Play. If you purchased a MedaStaré subscription through Google Play, deleting the MedaStaré account does not automatically cancel the Google Play subscription. Use Google Play's subscription-management tools to stop future renewal. Google Play refunds are handled under Google Play's applicable rules and any refund authority available to MedaStaré.

MedaStaré may retain limited store transaction or entitlement records after account deletion where reasonably necessary for refund/revocation handling, fraud prevention, accounting, legal obligations or dispute resolution. Those records do not reactivate the deleted MedaStaré account.

See the Subscription Terms for additional billing, cancellation and refund information.

7. Sign in with Apple and other login providers

If the deleted account used Sign in with Apple, MedaStaré's deletion process is intended to remove the MedaStaré account connection and revoke the applicable Sign in with Apple authorization in accordance with Apple's technical requirements where the required authorization token is available.

If a supported external login provider requires a separate revocation or disconnection step, MedaStaré may perform that step where technically available. Deleting the MedaStaré account does not delete the user's Apple Account, Google account or other independent platform account.

8. Creator accounts and Stripe Connect

If you participate in a MedaStaré creator, StarGift or payout program and have connected a Stripe account, deletion of the MedaStaré account and deletion of Stripe-controlled records are separate processes.

MedaStaré may close, de-link or request closure of the MedaStaré-side creator connection where supported. However, Stripe may independently retain identity-verification, KYC/AML, payout, tax, fraud, transaction or financial-compliance records where Stripe is legally required or permitted to retain them.

Deleting the MedaStaré account does not erase an outstanding financial obligation. Where legally permitted, pending creator earnings, refunds, reversals, reserves, disputes, negative balances or other payout adjustments remain subject to the applicable Creator Program & Payout Terms.

MedaStaré does not require a creator to email complete card numbers, CVC codes, online-banking passwords or similar full financial credentials in order to request account deletion.

9. Public, social and shared content

Where social or community features are enabled, MedaStaré will take reasonable steps to remove, de-identify or disconnect account-linked public content from the deleted account where appropriate.

Some references may remain if deletion would alter another user's independent record, break an existing conversation or transaction record, impair safety/moderation history, conflict with a legal obligation or remove evidence necessary to resolve a dispute. Where retention is appropriate, MedaStaré will minimize or de-identify the information when reasonably possible.

MedaStaré cannot delete screenshots, downloads, reposts or other copies independently created and stored by other users or third parties outside systems controlled by MedaStaré.

10. MedArena, rewards and dispute records

Account deletion does not automatically invalidate or erase records that must be retained to administer a completed or active MedArena challenge, determine eligibility, document a winner, investigate manipulation, enforce Official Rules, issue or reverse a reward, comply with tax requirements or resolve a dispute.

Where a user deletes an account while an entry, reward or dispute remains unresolved, the applicable Official Rules and Terms of Use may determine whether the entry is withdrawn, disqualified, preserved for audit, or otherwise handled. MedaStaré will not retain unrelated account data merely because a challenge record must remain.

11. Request deletion when you cannot sign in

If you cannot access the in-app deletion flow, email support@medastare.com from the address associated with the account where possible. State that you want the MedaStaré account deleted and that you cannot access the in-app deletion flow.

MedaStaré may ask for information reasonably necessary to locate the account and verify that the request is authorized. Do not send your password, authentication token, Apple or Google credentials, full payment-card information, online-banking password, CVC code, intimate image, medical record or identity document by ordinary email unless MedaStaré has specifically provided a secure and necessary verification method.

A support request initiates the deletion process; it does not itself prove that deletion is complete. MedaStaré will process the request within the period required by applicable law and will provide confirmation through an available contact channel where appropriate.

12. Cancellation and recovery

The current deletion design does not provide a general grace period after confirmed deletion. Once the deletion workflow reaches an irreversible stage, MedaStaré cannot guarantee that the account or active data can be restored.

If the interface presents a cancellation option before irreversible deletion begins, you may use that option while it remains available. The existence of a provider soft-delete or recovery layer does not create a user right to restore a deleted MedaStaré account and does not mean MedaStaré will restore deleted data on request.

If you believe an account was deleted without authorization, contact support promptly. MedaStaré may investigate available security records but cannot promise recovery of data that has already been permanently removed.

13. Other privacy rights

Account deletion is separate from other privacy rights. Depending on your jurisdiction, you may also have rights to access, correct, obtain a copy of, restrict, object to or otherwise control eligible personal data.

For other privacy requests, use the Privacy Choices page or review the Privacy Policy. MedaStaré may verify identity and apply lawful exceptions before acting on an account-specific request.

14. Help

For account-deletion status, a failed deletion request, or questions about retained records, contact support@medastare.com.

For creator payout account questions involving Stripe Connect, use the creator support channel made available by MedaStaré or Stripe as applicable.