Delete your Mabuu Fala account

How to delete your account

1. On the web, on this page: enter the account email and tap Send verification code.
2. Enter the 6-digit code sent to your email. It is valid for 15 minutes and can be used only once.
3. Confirm that you understand the deletion is permanent and tap Delete my account. The account is deleted immediately.

In the app

In Mabuu Fala, tap the gear, enter the guardian PIN and open Settings Area → Account and security → My account → Delete my account. Confirm with your password.

Verification code

Enter the code sent to your email. It is valid for 15 minutes.

Permanently delete your account?

Deletion will permanently remove your Mabuu Fala account and its associated server data. This action cannot be undone.

Request a new code

Data deleted immediately

• Account: name, email and password (stored only as a hash).
• Sessions and devices connected to the account.
• Child profiles and everything linked to them on the server: synced settings and, if any, cards, phrases and voice settings stored there.
• App usage statistics, when the guardian authorized their collection.
• Plan, trial period and subscription.
• Verification codes and emails not yet sent.

Today the app keeps custom cards, phrases, photos, recordings and the PIN only on the device, without sending them to the server. This website cannot erase what is on the device: delete through the app, or uninstall it and clear its data in your device settings. If any of this data is stored on the server, it is deleted together with the profiles.

Data kept after deletion, for how long and why

• Access logs (IP address, date and time, the page or service accessed and the browser or device), recorded by the website and API servers: 6 months, as required by Brazil’s Internet Civil Framework (Law 12,965/2014, art. 15), a retention allowed by the LGPD (art. 16, I). They are then deleted automatically.
• Account security log (which actions were taken — signing in, signing out, changing the password, changing consent, exporting or deleting data —, with date and time, device and internal identifiers; no IP of yours, name, email, password or child content): 6 months. This period is not required by law. We keep it to investigate unauthorized access to the account: the log shows what was done, and only matched with the access logs, which are also kept for 6 months, can we tell where it came from. With a shorter period it would disappear before the logs it must be compared with, and this kind of problem is often noticed only weeks later. It is then deleted automatically.
• Server backups: up to 15 days. They exist only to restore the service after a failure and are replaced automatically: daily database copies last 14 days, and weekly server copies made by our hosting provider are replaced by each new copy.
• Record of sent emails, kept by our email provider (Resend), including the email with the code: 30 days, to prove delivery. The provider then deletes it.
• A device that was offline may keep opening the app until its offline license expires. After that, the app asks for a login, and the deleted account can no longer sign in.