Why Nuvora AI uses an anonymous app account
Nuvora AI is designed to reduce friction and keep the product private by default. The app creates an app user ID during backend bootstrap, receives a client session token, and uses that token for later API requests. Users can complete the core food-decision flow without account registration credentials.
This anonymous app account is still treated as account data. If you delete it in the app, the backend removes the data tied to that app-generated user ID.
What deletion removes
Backend deletion removes the Nuvora AI profile, subscription snapshot, quota state, saved meals, smart cart items, product favorites, menu orders, planned meals, first-party product interaction events, and the active client session for the app-generated user ID.
Nuvora AI may keep a one-way deletion marker for the app-generated user ID. That marker is used only to prevent stale app requests or provider webhook replays from recreating deleted backend records.
What deletion does not remove
Deleting Nuvora AI backend data does not cancel Apple App Store subscriptions, remove App Store purchase history, or delete records that Apple must keep for billing, tax, refund, or legal reasons. Manage subscriptions in Apple ID settings.
Nuvora AI does not ask for your Apple ID password, payment card number, RevenueCat dashboard credentials, backend API keys, webhook secrets, or other secrets.
How to export data
Open Nuvora AI on your iPhone and go to Profile > Data & privacy > Export account data. The app requests the export for the same anonymous app account and can also create a support packet for troubleshooting.
If you cannot access the app
Email [email protected] with the subject Nuvora AI Account Deletion Request. Include your app version if known and the support packet if the app can still export it. Do not include Apple ID passwords, payment details, API keys, or other secrets.
Future sign-in
If Nuvora AI later adds cross-device sync or a web account dashboard, the app and website will be updated with an authentication flow and a matching account deletion path. The current release does not require user sign-in.
