Account Deletion and Data Requests

You can request deletion of your UniBites account at any time from Settings → Danger Zone, or by contacting us. Account deletion is permanent and cannot be undone. Before deletion, you may wish to download a copy of your data (see Section 4 below), as it will no longer be accessible afterwards.

If your account has an active UniBites Unlimited subscription at the time of deletion, the subscription will be cancelled immediately and a prorated charge may apply for the billing period already used. You will be informed of any proration charge before confirming deletion.

When you delete your account, the following personal data is removed:

• Your email address (replaced with an anonymised identifier)
• Your display name, username, and profile photo
• Your profile banner and bio
• Your direct messages and group chat contributions
• Your bookmarks and saved collections
• Your follows and followers
• Any stored biometric (WebAuthn) credentials
• Your two-factor authentication (2FA) settings

To keep the community cookbook useful for other students, and to meet our legal and audit obligations, certain information is retained after account deletion:

• Recipes and reviews you created are retained under an anonymised profile (shown as a generic “deleted user” name) so other students can continue to benefit from them.
• Complaints and support records are retained for 7 years from account deletion or complaint closure for audit and legal purposes, then permanently deleted.
• Payment and billing records are retained as required by tax and financial regulations.
• Certain information may be retained in anonymised or aggregated form, or where we are legally required to keep it.

Under UK and EU data protection law (including the UK GDPR and the Data Protection Act 2018), you have the following rights, subject to certain exceptions:

• Right of access — to receive a copy of the personal information we hold about you.
• Right to rectification — to have inaccurate information corrected.
• Right to erasure — to request deletion of your personal information (also known as the “right to be forgotten”).
• Right to restriction and objection — to ask us to limit or stop certain processing.
• Right to data portability — to receive certain information in a structured, machine-readable format.
• Right to withdraw consent — where we rely on consent, you can withdraw it at any time without affecting processing carried out before withdrawal.

You can exercise most of your data rights directly from your Settings page, including downloading a copy of your data using the in-app data export feature. To make a formal data subject access request (DSAR), or to request rectification, erasure, or portability, contact us through the Contact page or by writing to hello@unibites.co.uk with “Data Request” in the subject line.

We will respond to your request within one month of receiving it. In some cases, this period may be extended by two further months where the request is complex or numerous; if so, we will inform you within one month and explain why.

If you have enabled biometric login (such as Face ID or fingerprint via WebAuthn), a public-key credential is stored on your account. This credential never leaves your device and we cannot use it to access your biometric data. Deleting your account clears all stored WebAuthn credentials. You can also disable biometric login or 2FA at any time from your settings, and we can remove stored biometric credentials from your account on request.

If you are unhappy with how we have handled your data request, please contact us first so we can try to resolve the issue. If you remain dissatisfied, you have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator, at ico.org.uk or by calling 0303 123 1113.

If you have any questions about account deletion or your data rights, you can reach us through the Contact page or by writing to hello@unibites.co.uk.