Deleting your account and data

You can delete your Soitilo account and your family’s data in the app, or ask us to delete them by email.

Deleting in the app

1. Open the app’s adult area with your own code.
2. Choose Data and account, then Delete the whole family.
3. Confirm with the account password.

The data is deleted at once from the server and from the device where you delete it. Only the family’s owner, the adult who created the account, can delete the whole family.

Deleting one learner

Any of the family’s adults can delete one learner’s data in the app:

1. Open the app’s adult area with your own code.
2. Choose Data and account, then Delete profile next to the learner’s name.
3. Confirm with the account password.

The learner’s profile (name, profile picture, age group and settings), play events and skill states are deleted, and so are the teachers’ access to the learner and the answers to the app’s requests the server keeps that name the learner. They are deleted at once from the server and from the device where you delete them, and from the family’s other devices the next time they sync with the server, for example when the app is opened on them. The other learners’ data stays. Deleting needs an internet connection.

You can also ask us to delete one learner’s data by email.

Asking by email

Send the request from your account’s email address to tuki@soitilo.com, with the subject “Delete my account”. A request from the account’s own address tells us that it comes from the account holder. If it comes from another address, we ask for a confirmation from the account’s address before deleting. To have only one learner’s data deleted, give the learner’s name in the request.

We delete the data and confirm it by replying within one month of the request at the latest.

What deleting the family deletes

• the family and the accounts of all its adults: email addresses and password hashes
• all learners: names, profile pictures, age groups and settings
• all the learners’ play events and skill states
• the family’s invitations and its teachers’ access to the family’s learners (a teacher’s own account stays)
• the sign-in tokens of all devices, so every device is signed out
• open password reset links and the answers to the app’s requests the server keeps.

A second admin’s account

A family’s second admin, who is not its owner, can ask for the deletion of their own account by email in the same way. Then that admin’s account, its sign-in tokens, open password reset links and the answers to the app’s requests the server keeps are deleted. The family, its learners and the owner’s account stay. Only the owner can have the whole family deleted.

A teacher’s account

A teacher can ask for the deletion of their own account by email in the same way. Then the teacher’s account, its sign-in tokens and its access to the learners families have shared with it are deleted. The families’ and learners’ data stays with the families.

What remains, and for how long

• Backups. Deleted data can remain in the database and server backups for at most 12 months and 30 days, after which it disappears from them by itself. Backups are used only to restore the service after a failure.
• Logs. The server’s error logs and the web server’s logs are deleted within 15 days.
• Audit log. If our support has looked at the family’s data or carried out the deletion in the service’s administration, the audit log keeps for 12 months which family or learner was looked at or deleted and when, as identifiers only, without names or other data.
• Devices. The app also keeps the learners and play events on the device. When the family is deleted in the app, they are deleted from that device at once. The family’s other devices are signed out, and the data on them is removed at the latest when you uninstall the app from them.
• Subscription. If the family has a subscription, deleting the account does not cancel it. Cancel it in Google Play or the App Store.

More about how data is processed: Privacy policy.