Delete account

The German version of this page is the authoritative one. This translation is provided for convenience; in case of any discrepancy, the German text prevails.

Applies to the “Aufmasstool” app and the user account belonging to it. As at: October 2026

You can delete your account yourself at any time — without being questioned, without giving a reason and without going through support. This page sets out how that is done, what is deleted in the process and what remains afterwards — with the reason and the period for each entry.

Option 1: In the app (recommended)

This is the quickest route — the deletion takes effect immediately and you are told straight away what was deleted. The delete button is in the Profile, not in Settings.

1. Open the app. On the start screen with the list of buildings, tap the person symbol at the top right — that opens the Profile. (The same screen is also reachable from Settings, right at the top as the first card Profile.)
2. In the Account section, scroll down to the red Delete account button and tap it. It is only shown if this device is connected to an account.
3. The dialog Delete the account for good? opens. If you lead a team in which others are still working, it first asks for a successor for the owner role. If you are on a paid plan, it reminds you that a subscription from the App Store or Google Play keeps running and shows you the way to the subscription management: in the app for iOS and Android, a button opens the store’s subscription management; in the browser the notice stands on its own.
4. Under Data held locally on the device, choose whether the measurements on this device are to stay: Yes keeps them, No deletes them too.
5. As a safeguard, type the word DELETE and tap Delete for good at the bottom.

The deletion then runs through without any further prompt: first your sign-ins on all devices are ended, then the data in the cloud is removed, and last of all the account itself. The app then reports what was deleted.

Option 2: By email

Can you no longer get into the app — device lost, app already uninstalled or signing in no longer possible? Then write to us:

Email: info@aufmasstool.de
Subject: Delete account
Content: the email address of your account.

We send a query back to exactly that address — nothing is deleted until you have confirmed. That is deliberate and at the same time our duty: where there are reasonable doubts about the identity of the person making the request, we may request additional information necessary to confirm that identity (Art. 12 Abs. 6 DSGVO). Without this step, any stranger with an email could have an account deleted that does not belong to them.

Time limit: we deal with your request without undue delay and in any event within one month of receipt (Art. 12 Abs. 3 DSGVO). Should that not be enough in an individual case, the period is extended by no more than two further months — we then tell you so within the first month and state what the delay is down to.

By this route we delete your account and your data in the cloud. We cannot reach the data on your device — what is held there stays there (see below).

A subscription in the App Store or on Google Play

If you took out a subscription through Apple’s App Store or through Google Play, it is billed by Apple or Google respectively and managed there as well. It keeps running after the deletion until you cancel it there — billing included. Deleting your account does not end it. You can cancel it in the store’s subscription management:

• App Store: apps.apple.com/account/subscriptions
• Google Play: play.google.com/store/account/subscriptions

Cancelling depends on your account with the store, not on your Aufmasstool account — you can do it before the deletion or afterwards.

What is deleted

• The user account with email address, password and every active sign-in — on other devices as well.
• Your profile on the server: display name, the email address held there, company name, billing address and VAT identification number.
• Your team membership. If you were the only member of your team, the team is deleted together with all the data stored in it: buildings, stairwells, floors, units, rooms, items, measured values, measurement sheets, BoQ items, contacts and building parts.
• Team events relating to your account — the messages through which the server tells your devices about changes in the team: that a project was assigned to you or withdrawn, that your role changed or that your membership ended, each with the time, the team, the project name and the person acting. They are deleted together with the account, and in other people’s events you are no longer recorded as the person acting. Should that not succeed straight away in an individual case, a nightly clean-up run catches up on it, at the latest in the following night. Independently of any deletion, we remove every team event 180 days after it arose.
• Uploaded files belonging to that data — photos, receipts, sketches, 3D room scans and the company logo — in so far as they belong to a team in which you were the only member. If the server cannot remove every file in the process, the app says so explicitly; get in touch with us in that case and we will clear up the rest by hand.
• Invite requests made under the email address your account is held under at that point in time.
• Interface settings of a team deleted in this way: webhook endpoints, their delivery logs and API keys.
• Export jobs and import jobs of a team deleted in this way: we delete the files exported through the interface immediately, as well as the files uploaded there for reading in, and the details of the jobs together with the team.

If you have changed the email address of your account at some point, tell us the earlier one as well: requests made under an old address are not covered automatically. We then delete those in addition.

In our encrypted backups the deleted data remains included until the backup in question has been replaced by newer ones: we keep the 30 most recent backups, which with one backup per night means roughly 30 days. Should we have to restore a backup to get operations running again, we then delete once more the accounts whose deletion is entered in the deletion record (see below).

This has two limits. If the database can no longer be read at that point, no surviving record knows the deletions made since the last backup: an account deleted during that time returns with the backup. If you find you can sign in again after such an outage, write to us — we will then delete it once more. And uploaded files are not covered by the renewed deletion of its own accord; we clear those up by hand.

What is retained — and why

Seven things survive the deletion. For each of them, this sets out what it contains, why it stays and for how long:

• An extract from your billing documents — eight years from the end of the calendar year. Invoices that have been issued are accounting vouchers and are subject to the retention periods of German tax and commercial law (§ 147 Abs. 3 and Abs. 4 Abgabenordnung, the German Fiscal Code, § 257 Abs. 4 and Abs. 5 Handelsgesetzbuch, the German Commercial Code, and § 14b Abs. 1 Umsatzsteuergesetz, the German VAT Act, each in the version in force since 1 January 2025); Art. 17 Abs. 3 lit. b DSGVO therefore exempts them from the right to erasure. The period does not begin on the day of issue but at the end of the calendar year in which the document was issued — a document from March 2026 is therefore kept until the end of 2034. Nor does it expire for as long as the documents are of significance for taxes whose assessment period has not yet expired (§ 147 Abs. 3 Satz 5 AO); we then retain the entry correspondingly longer. What is kept is not the document itself but an extract: document type, status, document number, date of issue, validity date and due date, net and gross amount, outstanding amount and currency. The team and project IDs appear in it only as a one-way value from which nothing can be worked back; names, addresses and the items of the document are removed. Each entry carries a note of how long it is kept. Once that period has run out, we remove it.
  The extract is not separated by document type: it also covers quotations, for which the law provides a shorter retention — six years for commercial letters sent (§ 257 Abs. 1 Nr. 3, Abs. 4 HGB, § 147 Abs. 1 Nr. 3, Abs. 3 AO). Quotations are at present held together with the invoices and are therefore retained for longer than the obligation requires. Where no retention obligation, or a shorter one, applies to an entry, we remove it earlier on request.
• A deletion record — with no time limit. One entry with the time, the scope of the deletion and a note of whether you deleted the account yourself or we did so at your request. The account ID and the email address appear in it only as a one-way value, not in plain text. The entry is the proof that deletion took place. It is also the list by which we repeat the deletion should we ever have to restore a backup — with the two limits set out above under the backups. For that it has to outlive every backup; that is why it deliberately has no time limit. The app cannot get at it, and the database rejects any change to or deletion of an entry.
• Subscription transactions — with no link to you. If you took out a subscription, that transaction remains in place as turnover of the provider in its own right; it is subject to our own retention obligation. What is deleted is the link to the account: the IDs through which the transaction was assigned to you are removed. No period is laid down for this.
• The operator log — untouched. It records which administrator carried out which action on which target and when. It is not touched when an account is deleted: an unalterable log with a built-in exception would no longer be proof of anything — neither towards you nor towards the supervisory authority. After the deletion, the account ID noted in it no longer points to any account or any profile. No period is laid down for this.
  If you delete the account yourself in the app, no entry arises there at all: only what we do as the operator is logged.
• The record of your agreement — until the end of the third calendar year after the deletion. When you register, you confirm with a tick that you accept the terms and conditions, have taken note of the privacy policy and are at least 18 years old; for older accounts the app asks once. Stored with it are your account ID, the kind of agreement, the version of the terms, the time and whether you agreed on registration or in response to the request — no email address and no IP address. The record remains so that we can show on which terms your account existed, for as long as claims arising from it can still be asserted (standard limitation period, §§ 195, 199 BGB, the German Civil Code; Art. 17 Abs. 3 lit. e DSGVO). The deletion only notes its time on the record. A nightly run removes it on 1 January of the fourth year after the year of deletion — after a deletion in March 2026, therefore, on 1 January 2030.
• Cancellations you submitted while signed in — for the same period. We keep a cancellation made through the “Cancel contracts” page as proof that and when it was received: name, email address, your details of the contract, the kind and the requested date of the cancellation, its receipt and the state of processing. If you were signed in at the time, it is assigned to your account; we then delete it at the end of the third calendar year after the year in which your account was deleted. For a cancellation without signing in, which is not assigned to any account, no period has yet been laid down.
• The declarations on your right of withdrawal when ordering — for the same period. If, when ordering, you confirmed that the service is to begin before the withdrawal period expires and that you thereby lose your right of withdrawal, we store the wording shown, with plan, term, language, time, your account ID and the ID of the payment transaction, as proof of the conditions under which your right of withdrawal lapsed. We delete it at the end of the third calendar year after the year in which your account was deleted.

If you work in a team

Measurements belong to the team, not to the individual person. If there are other members in the team besides you, the shared data therefore remains in place — only your membership is deleted.

If you are the owner of a team in which others are still working, the app asks beforehand who is to take over the owner role. Without a successor we refuse the deletion — a team without an owner is a team in which nobody can invite anyone, remove anyone or bill anything any more, and that cannot be undone.

Team licences. If you hold a Team licence that someone assigned to you, it becomes free with your account. If you assigned Team licences to other accounts, the deletion also ends the subscription they come from; the licences you assigned are suspended afterwards.

What is held on your device

Aufmasstool stores your measurements on the device first and only after that in the cloud. We cannot reach this local data; it is held by you alone.

• If you delete your account in the app, we ask you what is to happen to the local measurements: keep them or delete them too.
• If you choose to delete them too (No in the dialog), the app clears all measurements and the account-related settings on this device — including your business’s company details (letterhead, tax and bank details, logo), the stored notifications about changes in the team and the access to a WebDAV server together with its password in the device’s keychain — and deletes the files belonging to them: the photos, videos and audio recordings and the images and 3D room scans from measuring with the camera. Whatever you exported or shared beforehand stays wherever you sent it. Copies in the app’s cache may also be left behind until the system clears the cache, as may individual files whose deletion fails — both at most until you uninstall the app. If removing the password from the keychain fails, the deletion still goes ahead; there is no separate message for this. The conflict list of the cloud synchronisation is cleared as well; an older version of the app leaves the rows recorded there on the device.
• The app’s backups stay on the device — including the one the app creates immediately before the deletion so that a copy of your measurements remains. A backup contains your measurements including 3D room scans and small preview images of the photos, plus the name and email address of your account and your company details, but not the photo, video and audio files themselves: if you chose No, none of these backups brings them back. The backups disappear from the device at the latest when you uninstall the app. In the browser the app creates no backup. If you choose No there, it tells you so beforehand and advises you to download one under Backup; after the deletion it tells you in any case.
• If you delete your account by email, the local data is left untouched. If you want to be rid of it as well, uninstall the app afterwards.

A backup of the whole device that you made earlier may still contain the app’s data. It is held by you or by the service you use for it; we have no access to it.

Beforehand: take your data with you

The deletion cannot be undone. Take two minutes before you start:

• Profile → Export data gives you every measurement as open JSON files plus a readable overview (data portability under Art. 20 DSGVO). The card sits on the same page as the delete button, directly below it. The export is tied to no plan and to no sign-in — it works in every state of the app, including on the lock panel after the deletion.
• Settings → Backup → Create and share backup produces a backup file with which you can restore your data to this app later on. The backup is the way back into this app, the export the way out.

After the deletion

Without an account the app cannot be used any further. The next time it starts there is no list of measurements but a panel asking you to sign in or register. That applies even if you have kept the measurements on the device: they are there unchanged, but they can only be reached again once an account is signed in.

• If you have kept the measurements, the panel says so explicitly and leaves two ways out open for which you need no account: Create backup and Export data. Next to them are Create account and Sign in; the panel tells you whether an invite code is needed for a new account.
• If you have deleted them too, the app starts as it does after a fresh installation, with the registration panel.

A new account does not bring the deleted data back: what was in the cloud is gone, and the new account belongs to no team. The measurements you have kept on the device, by contrast, stay where they are and are available again once you have signed in.

Questions about deletion

Write to us at info@aufmasstool.de. Further details on the processing of your data and on your remaining rights — access, rectification, restriction, data portability, objection and a complaint to a supervisory authority — are set out in the privacy policy, and the provider details in the legal notice.