Deleting your everygrocer account

On this website: sign in, open Account from the top bar (everygrocer.com/account), scroll to “Delete account”, and follow the steps. You will be asked to type your email address to confirm — that is the only confirmation, and after it there is no undo.

In the everygrocer app for iOS or Android: open Account, tap “Delete account”, and follow the same steps.

If you cannot sign in — you no longer have access to the email address on the account, for example — write to privacy@everygrocer.com and tell us which email address the account uses. We will verify that the account is yours and delete it for you. We respond within 45 days and in practice much sooner.

Your identity: email address, name and profile picture.

Your sign-in: every session on every device is ended immediately, and any Google or Apple account linked to your everygrocer account is unlinked. You are signed out everywhere the moment you confirm.

The personal details on your past orders: the contact email, phone number, delivery address and any note you wrote for the shop owner.

Transfer screenshots: if you paid a shop owner by Zelle or Venmo and uploaded a screenshot, both the image file and everything read off it — the sender name, the amount and the last four digits of the account — are deleted.

Your family & friends list: the people you added, their contact details, and the private links that let them see your orders. Those links stop working immediately.

If you run a shop: your shop is closed and taken off the market, your listings are taken down, your pickup address, phone number, shop photo, Zelle and Venmo handles and saved card are removed, and your drivers and their links are deleted.

The amount, date and status of orders you already placed. We are the merchant of record for card payments, which means these are our accounting records: tax rules require us to keep them, and the shop owner who packed your groceries has to be paid for them. Deleting them would break both.

These records stay, but they stop pointing at you. Your name, email address, phone number and delivery address are removed from them, and the account they belong to no longer has an email address, only an unusable placeholder. What is left is an amount, a date and a shop.

Payments themselves are held by Stripe, our payment processor, under its own retention rules — a completed card payment is a financial record on their side and cannot be erased by us or by them.

We do not keep a hash or any other fingerprint of your email address. Some services keep one so they can recognise you if you come back; we do not, because being able to recognise you is the same as not having deleted you. If you sign up again later with the same email address, you get a brand-new account with no connection to the old one.

Deletion happens when you confirm — not overnight, and not after a review. By the time the page reloads you are signed out and the account no longer exists.

One exception is backups. Our database is backed up automatically so it can be restored after a failure, and a copy of your data can survive in a backup until that backup expires and is discarded on its own schedule. Backups are never read to look someone up; they are only ever used to restore the whole database.

Deleting removes the contact details a shop owner needs to reach you, so we do not allow it while something is still in flight. The Account page tells you exactly which of these applies to you and what to do about it.

You have an order in progress — not yet paid, waiting to be weighed, waiting for a transfer to be confirmed, or paid but not yet handed over. Cancel it on your Orders page if it is cancellable, or wait until you have the goods. An order counts as finished three days after the shop owner marks it handed over, even if you never tap “Confirm received”.

You have a refund on its way back to your card. Wait until the money arrives.

You run a shop and there is money in the middle: a customer is still waiting for an order, a payout for your sales has not gone out yet (payouts run weekly), or your shop still owes everygrocer for a chargeback or a refund issued after payout. Deletion is not a way to walk away from a balance, in either direction — we do not want to keep money that is yours, and we do not want the button to be a way to cancel a debt.

None of these are permanent. Once they clear, the delete button works.

Anything about deletion, or about the data we hold, goes to privacy@everygrocer.com. Our full privacy policy is at everygrocer.com/privacy.