Data Deletion

You can delete your Diskus account and the personal data associated with it at any time. This page describes exactly what happens and how to do it.

1. Delete from within the app

Open your account screen in the application and choose Delete account. In most Diskus apps that screen is under Settings → Account; in Astra Home it is the Astra account screen reached from the dashboard. Because Diskus uses a single sign-on account, deleting your central account removes your identity from all Diskus applications — including Cricket Wise, Card Games, KarmaQ, Bhagya Jyotish, Diskus AI Email and Astra Home.

2. Delete from the web

You do not need the app or an account session. Use diskus.ai/delete-account.html and enter the email address on your account. We send a confirmation link to that address; nothing is deleted, and nothing is scheduled, until you follow it.

If you cannot access that mailbox, email hello@diskus.ai with the subject “Data deletion request” and we will verify your identity another way.

3. The 30-day grace period

Once confirmed, your account is erased 30 days later, and we email you when it is done. You can cancel at any time before then by signing in to any Diskus app and choosing Settings → Account → Cancel deletion.

The delay is deliberate: it gives you time to change your mind, and if someone else gains access to your account and requests deletion, it gives you a month to sign in and stop it.

4. What is deleted

• Your account profile — name, email address and authentication identifiers — across all Diskus applications.
• Every sign-in session and refresh token, on every device.
• All Google OAuth access and refresh tokens we hold for you.
• Your entry in our central identity directory, so no remaining record maps an internal identifier back to you.
• Push notification tokens and product analytics events tied to you.
• If you have never paid us anything: your game and application data as well — saves, career progress, balances and content. It is deleted outright, not merely stripped of your email address.

5. What is kept, and why

Two things survive, and we would rather state them plainly than let you discover them later.

• Payment and transaction records — invoices, receipts and the entitlements they purchased. We are required to keep these: tax and accounting law overrides the right to erasure (UK GDPR / EU GDPR Art. 17(3)(b) and (e)). Discus IT is registered and operated in India, so we apply the Companies Act 2013 period: 8 years from the end of the financial year in which each purchase was made.
• Where a payment exists, the game data attached to it. Kept on the same legal basis, for the same period, and used only for tax, refunds, chargebacks and disputes — never for analytics, game balancing or marketing.

Your identity is removed either way, so what remains is no longer linked to your name or email address. And the period is a real end date, not an indefinite hold: when it expires, these records are destroyed automatically — you do not have to ask again.

6. Backups and logs

Routine backups containing your data expire and are overwritten within 35 days of deletion. Server request logs, which contain IP addresses and device identifiers, are kept for 90 days for security and abuse investigation, and then expire.

7. Google-linked data

If you connected a Google account, you can additionally revoke Diskus's access directly at your Google Account permissions page. Revocation immediately prevents further access; deleting your Diskus account (sections 1–2) also removes data already received from Google from our systems.

8. Contact

Questions about deletion or this process: hello@diskus.ai.