How to delete your data

You can delete your Ordertrack account and personal data at any time. Here's how to do it, what gets removed, and what happens to records shared with other people.

Delete from inside the app

1. Open the Ordertrack app and sign in.
2. Go to Settings → Account.
3. Tap Delete account.
4. Confirm. Your account and personal data are removed immediately, and you are signed out on all your devices.

Delete without the app

If you can't sign in, use our account-deletion page. Enter your phone number, confirm the one-time code we send by SMS, and your account is permanently deleted.

What gets deleted

• Your profile (name, phone, email, photo) and your sign-in credentials.
• Your shop and its items and photos (if you're a merchant).
• Your driver profile and credit balance (if you're a driver).
• Your notifications and every signed-in session, on all devices.

What is kept (with your identity removed)

To keep the other people in an order accountable and to meet legal and financial record-keeping duties, records of completed orders, payments, ratings, and disputes are kept as part of the other parties' history — but your personal identifiers are removed so the records no longer identify you. Chat messages and the photos and voice files in them are automatically deleted after 365 days.

What if someone else signs up with my phone number?

A phone number belongs to one account at a time. If you stop using Ordertrack and later someone verifies your old number on a new account, what happens to your old account depends on how you used to sign in:

• Your old account also has Google, Apple, or a verified email → it stays active. Only the phone number is detached, and we notify you on your remaining sign-in methods. You keep your account.
• The phone number was your only way to sign in → the account can no longer be reached, so it is scheduled for automatic deletion about 3 months later. This is a "soft deletion": if you sign back in before then — by re-verifying a phone number or adding a social login — the deletion is cancelled.

You never lose an account that still has a second sign-in method; the timer only applies to accounts that have become unreachable.