Delete your Holdfast account

Last updated September 22, 2026 · Applies to Holdfast on iOS and Android, published by Fremdly Marketing LLC.

Delete in the app

1. iPhone or iPad: Open You and choose Delete my account. You can also choose Privacy and your data, then Delete my account.
2. Android: Open You and choose Delete my account. You can also choose Privacy and your data, then Delete my account.
3. Read the consequences, choose Continue, and complete the fresh sign-in check for the provider you used. If the app asks you to finish local cleanup after an interruption, follow that recovery screen.

If you already uninstalled Holdfast

Use the form above with the same account, or reinstall Holdfast from TestFlight or the Android beta and choose Delete my account there.

What the app deletes

• The Firebase Authentication account and the app's known account records in Cloud Firestore.
• The synced library and review schedule used for account backup and restore, your translation preference, notification registrations, and subscription-tier record.
• Your synced study data (settings, progress, and text-free practice records), the counters used to apply sync limits, and your profile name.
• Server records linked to the account, such as rate-limit counters, beta-testing eligibility, and app-integrity replay records, which are removed by automatic cleanup that runs when the deletion starts.
• Account-scoped local copies and related local account state, except the device security marker described below, on the device where the in-app flow runs. The app does not send your practice attempts, mistakes, or notes as part of this request.

Website Google Analytics page views on holdfastbible.com are not tied to your account and are not part of this deletion sweep. See the Privacy Policy.

Passage removal without an account

You can remove one passage without deleting an account. In Library, open a passage and its more-actions menu. On iOS, choose Archive or Delete from the passage's ••• menu; the same controls are available in Discover → Manage library. On Android, choose Archive passage or Delete permanently from the passage's ⋮ menu, then confirm.

Archive moves a passage to Archived, where it can be restored. Delete permanently removes that passage from this device. For a signed-in account, the app also records the passage deletion for sync. This is separate from deleting the account.

Subscriptions and provider records

Deleting a Holdfast account does not cancel an Apple App Store or Google Play subscription. Cancel separately in your Apple ID or Google Play subscription settings. Apple, Google Play, and RevenueCat handle purchase and transaction records under their own policies; this page does not promise deletion of third-party billing records.

• Firebase privacy and security
• Apple privacy policy
• Google privacy policy
• RevenueCat privacy policy

Deletion fence and local markers

The flow intentionally retains a server-side account-deletion fence keyed by the Firebase account identifier in its document path. It contains no Scripture, notes, or practice history and remains to prevent stale signed-in devices from writing records again. This server-side key is distinct from the one-way SHA-256 Firebase-user-ID digests retained locally for ownership and recovery. On iOS, the local deletion workflow also keeps a phase marker; after the local reset completes, sync metadata retains a content-free completed-deletion digest for account-isolation checks. Local markers contain no raw user ID or practice content.

Device security marker on Android

Android keeps a content-free marker showing that an account has previously used this app installation. The marker is a one-way SHA-256 digest derived from the first account's Firebase user ID, or an “unknown previous account” marker if ownership cannot be recovered. It contains no Scripture, notes, prayers, practice history, email address, or readable user ID. It stays on this device to prevent a later account's cleanup from erasing another person's preserved data.

This marker survives sign-out, account switching, in-app account deletion, and recovery resets. It has no timed expiry and remains while the app's local data remains. The Android app excludes its local data from Android cloud backup and device-to-device transfer.

Retention

Before the deletion finishes, it deletes and verifies your account records in Cloud Firestore and then deletes your sign-in. Other server records linked to the account are removed by automatic cleanup that normally completes within minutes and retries if it fails. After that:

• Backups: daily database backups are kept for 7 days, so copies of deleted records can remain in a backup for up to 7 days before it expires. If we ever restore from a backup, we re-apply account deletions made after that backup was taken.
• Logs: service logs are kept for 30 days; certain Google-required security and audit logs are kept for up to 400 days. Our logs are designed not to contain Scripture, notes, or practice content.
• Deletion fence: the content-free marker described above is kept permanently.
• iOS beta-access binding: if you used an iOS beta build that checks beta access, a record keyed by a one-way hash of the app’s Apple transaction ID, holding a code derived from your account ID (never the raw ID), is kept for up to 180 days after beta access was last checked. It stops beta access from moving to a different account and then expires automatically.
• Feedback reports are not linked to your account and expire on their own schedule (both after 90 days).
• Analytics and crash data, if sharing was on (by your choice or the regional default), are not linked to your account and expire under the retention periods in the Privacy Policy.

Apple, Google Play, and RevenueCat keep purchase and transaction records under their own policies for purposes such as billing, tax, fraud prevention, and legal compliance.

Contact

Questions about this page: hello@holdfastbible.com. For app access help, use support@holdfastbible.com. The fastest way to delete an account is to use the form above or the app. If you can no longer sign in to your account, email support with the subject “Privacy request” from the account’s email address, and we will help once we confirm you control the account. Never email a password or any private practice content.