You can request the deletion of your WOD Manager account and the personal data associated with it at any time, with no questions asked. This page explains the two ways to do it, what gets deleted, and what we are required by law to keep for a limited time.
Option 1 — Inside the app (recommended)
- Open the WOD Manager app on Android or iOS.
- Go to Profile (bottom right icon).
- Tap Settings → Privacy → Delete my account.
- Confirm with the password of your account. We will send a confirmation email and start the deletion within minutes.
You can also download a JSON copy of everything we hold about you from the same screen, before deleting.
Option 2 — By email
If you can't access the app — for example because you lost your password and the recovery email is also gone — write to:
Subject: Account deletion request
Body: indicate the email address associated with your WOD Manager account and write "Please delete my account and personal data."
Write the email from the same email address that you used to sign up. If that's not possible, we will need an alternative way to verify your identity (a copy of your ID document or a video selfie) before deleting anything, as required by Art. 12 GDPR to prevent malicious deletion requests.
What gets deleted
Once we process your request, the following data is permanently removed from our active systems within 7 days, and from encrypted backups within 35 days:
- Your profile (name, email, phone, username, photo).
- Your bookings history (past and future).
- Your personal records (PRs) and training stats.
- Your saved payment methods (cards, SEPA mandates — these are also revoked at Stripe).
- Your push notification tokens.
- Your in-app messages with the box staff.
- Your custom roles and permissions.
- Your Firebase Authentication account (you will no longer be able to log in).
What we keep (and for how long)
Some data must be retained for legal or tax reasons. After the retention period expires it is also deleted. During that time it is stored with restricted access and only used to comply with the obligation that requires it.
- Tax invoices issued to you: 6 years (Art. 30 Spanish Commercial Code). Includes the invoice PDF, the amount and your tax ID. Required by the Spanish Tax Agency (AEAT) for VERI*FACTU.
- Stripe payment metadata: 6 years. We keep transaction IDs, amounts and dates so we can answer chargebacks and AML inquiries. We do not keep card numbers (Stripe stores those separately, also subject to deletion on your request to them).
- Anonymized usage logs: up to 12 months. These are aggregated and don't identify you personally; they help us debug and improve the app.
- Records related to legal claims: until the dispute is resolved + applicable statute of limitations.
See our Privacy Policy for the full breakdown of retention periods.
How long it takes
We confirm the request by email within 48 hours. Deletion from active systems completes within 7 days. Deletion from encrypted backups can take up to 35 additional days due to backup rotation cycles.
You will receive a final confirmation email when the process is finished. After that point, your data is gone for good and cannot be recovered.
A note about your box
If you are a member of a CrossFit box that uses WOD Manager, your data is also visible to that box (the box is the data controller; we are the data processor). Deleting your account with us also removes you from your box's roster.
If you only want to leave a specific box but keep your account (for example, because you moved to another city and joined a different box), ask the staff of your old box to "deactivate" your membership instead of deleting your account.
If you change your mind
Once deletion is complete, your data is unrecoverable. If you want to use WOD Manager again later, you'll need to sign up from scratch.
If you haven't received the final confirmation email yet, you can still cancel the request by replying to the initial confirmation email within 48 hours.
Questions
For anything related to this process, write to hello@wod-manager.com. We read every message.
You also have the right to complain to the Spanish Data Protection Agency (AEPD) at sedeagpd.gob.es if you believe we did not handle your request properly.