Delete your account and data

Your account was created by your employer, and the logs you submit are that company's business records. That makes your employer the controller of the data, and it means a deletion request goes to them first — but there are two things you can do yourself, and one of them is immediate.

• Erase everything on your phone, now. In the app, open Profile → Delete account & data → Erase data & sign out. This permanently removes the logs, profile, and settings stored on the device and returns you to the code screen. It is immediate and needs no network connection. Anything you have already submitted stays with your employer, because it is their record of work performed.
• Request deletion of the account itself. The same screen has Request deletion, which opens an email addressed to your company's administrator with your details filled in. If you no longer have the app, or your access code has already been deactivated, email us directly at privacy@fuelrelay.net and tell us your name and the company you fueled for. We will pass the request to that company's administrator and help them carry it out.

We answer every request within 30 days, including the ones we have to route through an employer.

You can delete the whole organization yourself, without contacting us. In the dashboard, go to Settings → Profile → Delete account. You will be asked to re-enter your password first, because it is not an action to take by accident.

Deleting the account also cancels the subscription at the end of the current billing period, and schedules the organization's data for permanent deletion 30 days later. Signing in to the dashboard before that date cancels the deletion — so if you change your mind, or delete in error, signing in is the undo.

You can also ask us to do it: email privacy@fuelrelay.net from the address on the account.

When the 30 days elapse, we permanently delete:

• Admin and fueler profiles, including names and access codes
• Every fuel log and every entry inside it
• Saved trucks, locations, contractors, and app settings held on our servers
• Your uploaded company logo and branding

Data held only on a fueler's phone is encrypted on that device and is erased by the in-app step above, or by uninstalling the app.

Three things outlive the account. We would rather say so here than have you discover it later.

• The audit log, anonymized. It is an append-only security record. On deletion we clear the acting user, IP address, and user agent, and keep what remains as evidence that the account's security-relevant actions happened.
• Billing records. Kept by us and by Stripe for as long as tax and accounting law requires. We cannot delete these on request.
• Crash reports. Already stripped of personal data before they leave the device, and deleted on our provider's standard 90-day schedule.

If a subscription lapses without the account being deleted, fueling entries stay exportable for 90 days and are then scheduled for deletion; starting a new subscription before that date clears the schedule. The full retention table is in section 6 of the privacy policy.

• On-device erase: immediate.
• Acknowledgement of a request: within 30 days, and usually far sooner.
• Permanent deletion: 30 days after the account is deleted or the request is verified, unless an administrator signs in and cancels it.

Questions about any of this go to privacy@fuelrelay.net. Your other rights — access, export, correction — are set out in section 7 of the privacy policy.