Delete your RTrack account and data

App: RTrack (Android, cc.bezgalm.rtrack)

RTrack needs no account. An account exists only if you turned on the optional end-to-end encrypted sync, which creates a sync account identified by a random rider ID on the RTrack sync service (rsync.bezgalm.cc). This page explains how to delete that account and everything stored with it on the server.

Delete it in the app

1. Open RTrack on a phone connected to your sync account.
2. Go to Settings → Sync.
3. Tap Delete account and server data.
4. Type DELETE to confirm.

Deletion happens right away and can't be undone. Your other phones lose access to the deleted account and keep the rides they already have.

Delete it by email (no app needed)

If you no longer have the app or the phone, send an email to rtrack@bezgalm.cc from any address, with the subject “Delete my RTrack account” and the rider ID from your recovery kit (the line starting with Rider ID:). Don't send your passphrase: it isn't needed, and nobody at RTrack should ever ask for it.

The account will be deleted within 30 days, and you'll get a reply when it's done. Your email address is used only to answer the request.

The server holds no name, email or phone number, so the rider ID is the only way to find your account. Without it, there is nothing on the server that links an account to you.

What is deleted

Everything stored for your account on the sync server:

• all your encrypted rides (every uploaded part) and their analysis results;
• ride metadata: ride ids, start and end times, sizes, change times, and markers for rides you deleted earlier;
• your registered devices, their names and their access tokens;
• your encryption key parameters (the passphrase-wrapped key and the recovery check value).

What is kept

• Rides on your phone stay there. Deleting the sync account doesn't touch them. To remove them too, use Settings → Clear all trips & data, or uninstall the app.
• The server keeps a record that your random rider ID was deleted, and when, so the ID is never reused. It contains no rides, devices or other data.
• For abuse limits on sign-up and recovery, the server keeps a keyed hash of the IP address of those requests (never the address itself). These hashes are deleted after 24 hours, whether or not you delete your account.
• The server runs on Cloudflare (Workers, Durable Objects, R2). A copy of the deleted account database may be retained in Cloudflare's backups (Durable Objects storage recovery history) for a limited time before it expires.

The developer can't read your rides

Rides are encrypted on your phone with a key derived from your sync passphrase before they are uploaded. The server, and the developer, only ever have the encrypted data, so deletion removes data that nobody but you could read in the first place.

More detail is in the privacy policy. Questions: rtrack@bezgalm.cc.