Deleting your account

Museum Companion, by Hybrid Dev — last updated 12 August 2026

You can delete your Museum Companion account, and the data attached to it, at any time. There are two ways to do it.

Delete it yourself, in the app

• Open Museum Companion and sign in, if you are not already.
• Swipe to your profile, the last pane.
• Choose Delete account, then confirm.

Deletion happens immediately. You are signed out, and the account cannot be recovered or signed into again.

The app tells you before you confirm if scans or Pro access are still on the account. They are destroyed with it, they are not refunded, and they cannot be moved to another account — so use them first if you want them.

Ask us to delete it, by email

If you cannot sign in, email support@hybriddev.io from the address on the account and ask us to delete it. We will confirm the address belongs to you, delete the account, and reply when it is done — always within 30 days.

What is deleted

• Your account and sign-in details — email address, and the identifier Apple or Google gave us if you signed in with either. We never held your password for those.
• Your profile — display name, narration speed, remaining scan credits, and any Pro expiry date. Unused scans are destroyed, not refunded.
• Any artwork reports you sent us.
• Internal rate-limiting records tied to your account.

All of it is removed the moment you confirm, and in every case within 30 days.

What is kept

• Records of purchases, with your account identifier permanently removed. Once the account is gone the record can no longer be connected to you or to any person. We keep it in that anonymous form because accounting and tax rules require us to retain proof of sale, and because refunds and chargebacks can arrive after an account is closed. It is deleted once those retention periods expire.
• Artwork descriptions in the shared library. When anyone scans a work, the description and narration are saved so the next visitor sees them instantly. These record the artwork only — they were never linked to you, your account, or your photo, and nothing in them identifies you.
• Server logs, for up to 30 days, then deleted automatically. These hold a timestamp, an anonymised request identifier, and error codes.
• A one-way hash of your email address. This is not the address itself, and it cannot be turned back into one. It exists for a single reason: the first scan is free once per person, and without it an account could be deleted and recreated to claim that free scan over and over. If you sign up again with the same address your account works normally — it simply starts without the free scan, because it has already been used. The hash is never used to contact you, to build a profile of you, or for anything else.

Your photos

Photos are never stored, so there is nothing to delete. A photo exists only for the seconds it takes to generate a description, then it is discarded. See our privacy policy for the detail.