Description
Per 0007 — Authentication, account recovery, and data-deletion behavior: there's no server-side data to delete (local-only architecture, 0001), but relying on "just uninstall the app" to delete data isn't discoverable or explicit enough. Build an in-app action that immediately wipes the local encrypted database.
Scope: a settings-level "Delete all my data" control and its confirmation/execution flow. Does not include any server-side deletion (none exists) and does not include the backup/export flow — this is destructive, one-way local deletion only.
Acceptance Criteria
Additional Info and Resources
- Source: 0007-authentication-recovery-deletion.md, "Data deletion" section
- Directly satisfies the MVP exit-criteria checklist item on documented deletion behavior (referenced in the ADR)
- Related: onboarding copy about backup responsibility is tracked as a separate ticket, since deletion is unrecoverable and users should understand backup is on them before they ever need this control
QA
Description
Per 0007 — Authentication, account recovery, and data-deletion behavior: there's no server-side data to delete (local-only architecture, 0001), but relying on "just uninstall the app" to delete data isn't discoverable or explicit enough. Build an in-app action that immediately wipes the local encrypted database.
Scope: a settings-level "Delete all my data" control and its confirmation/execution flow. Does not include any server-side deletion (none exists) and does not include the backup/export flow — this is destructive, one-way local deletion only.
Acceptance Criteria
Additional Info and Resources
QA