Delete your account

Before deletion

A successful patient-record export is required before Delete Account becomes available. Save the plaintext ZIP in a controlled location and meet any professional retention duty. Cancel App Store, Google Play, or Stripe billing separately because deleting the account does not cancel a store subscription.

1. Open Settings → Help & Support → Delete Account.
2. Complete Export Patient Records. The delete button remains disabled until that export succeeds in the current flow.
3. Tap Delete Account.
4. In the confirmation dialog, tap Yes, delete my account.
5. Enter the emailed code and tap the final Delete Account action.

What Maestra deletes

The confirmed operation removes Maestra-held account and database records, including patient and encounter content, transcripts, generated notes, assistant histories, finance records, templates, and wrapped key material. Removing the wrapped key material makes the remaining server-side ciphertext unavailable to Maestra.

Apple-token revocation and RevenueCat customer deletion are attempted on a best-effort basis. A failure in either external cleanup does not keep the Maestra account records. Store subscriptions remain governed by the store and must be cancelled independently.

Scope of deletion

Deletion does not erase a plaintext export, a user-created backup, or a copy retained on another device. Those copies remain under the user’s control.

Export patient records