Delete Your Account

Deleting Your Nlarj Account

Version: v1.2.0 Effective Date: August 14, 2026 Last Updated: August 14, 2026

CORRECTION NOTICE. This corrects v1.0.0, the version published at nlarj.app/account-deletion. v1.0.0 was reviewed line by line against the running system and thirteen statements did not hold. Where the promise was right and the code was missing, we built the code; where the promise was larger than anything we could honestly build, it is stated smaller with the gap named. What changed, and which way each one was resolved, is recorded in CHANGELOG.md.

v1.1.0 was never published. It was drafted as the first attempt at this correction, and a second review found five statements in it that were still not true — including one the changelog had certified as "checked against the erasure code and accurate". It was held back and superseded by this version rather than shipped. We are recording that here, rather than quietly skipping a version number, because a page whose entire purpose is to stop overstating things should not begin by concealing its own second draft.

We would rather publish the correction than leave a page that reads better than the thing it describes.

NOTE: The entity responsible for your account, and for deleting it, is Promised Land Labs Private Limited, a private limited company incorporated under the Companies Act, 2013 of India (CIN: U94910AP2026PTC126073), with registered office at 6/1019, GUNTAKAL, Guntakal, Guntakal, Ananthapur- 515801, Andhra Pradesh, India, trading under the brand name "Nlarj."

This page explains how to delete your Nlarj account, what happens when you do, what we delete, what we keep, and why. It is written to be read before you decide, not after.

You do not need a reason, and you do not need our permission. There are two exceptions, both about other people rather than about you, and Section 8 says what they are.

1. Deleting from inside the app

You can delete your account yourself, from the app, without asking anyone. It works today, in all three of our apps.

• Member app and Church Admin app: open Help & Support, stay on the FAQ tab (it opens there), and scroll to the bottom. Delete account is the last item, below the frequently-asked questions. In the member app you reach Help & Support from your Profile.
• Counselor app: open your Profile. Delete account is in the settings list, just below Privacy Policy.

The option is in the mobile apps, on iPhone and Android. It is not shown in the Windows and Mac desktop apps — in any of the three — because the sign-in step described below does not work there. If you use Nlarj on a desktop, either delete from your phone or use the form in Section 2.

Before the account is deleted, the app asks you for two things:

1. Sign in again. You sign in once more with Google or Apple — whichever you normally use — with the same account you are deleting. There is no password to type; it is the same sign-in you already know. This is deliberate. It means that somebody who picks up your unlocked phone cannot delete your account, and that a stolen session cannot either. If you sign in with a different account, the app stops and tells you so. You have ten minutes from signing in to finish.
2. Type the word DELETE. The button stays disabled until you do.

You will also be shown, on that same screen, a plain list of what is deleted and what is kept. That list is a summary — this page is longer and covers more — but nothing on that screen contradicts anything on this page. It used to: the screen said your chat messages were deleted, while Section 7 says a message you have already sent cannot be removed from the recipient's phone. The screen was wrong and has been corrected, because the last thing you read before deciding should not be the one thing that overstates what we can do.

That screen is in English only, in all six of our app languages. That is a gap we intend to close, and we would rather say so here than let you find it at the moment you are trying to make a decision.

2. If you cannot sign in

If you have lost access to your email address, your phone, or the account itself, you cannot use the route in Section 1 — it depends on you being able to sign in. Use the form on this page instead.

The form asks for three things:

• the email address on your Nlarj account — this is how we find you;
• a reason, if you want to give one — optional, and it changes nothing about whether we act;
• a confirmation that you understand deletion is permanent.

Nothing else on that form reaches us. We do not ask for, and do not want, your password, your card details, or a copy of your identity document.

When you submit it, a support ticket is opened and a person reads it. You will see a reference number on the screen straight away — keep it, because it is your record of the date you asked. The request is then verified and processed by hand, and you get an email when it is done.

Be aware of what the ticket itself is. Our helpdesk runs on Atlassian Jira Service Management, and the ticket that this form opens carries the email address you gave, in that system, so a person can find you and reply. When we later erase your account we delete our own copy of your support tickets and blank the email address on them — but the helpdesk's copy is not anonymised today. Section 5 says so plainly rather than implying otherwise. If you would rather not create that record, you can write to privacy@promisedlandlabs.com instead; it reaches the same people.

We do not yet publish a turnaround time for this route. It is worked by a person rather than by a job on a timer, and we would rather leave the number out than print one we have not committed to. We will tell you what it is once we can hold ourselves to it. In the meantime, your rights under the Digital Personal Data Protection Act, 2023 are unaffected, and the response times in our Privacy Policy still apply.

This form is only for deleting an account. It does not create a marketing contact, and we do not use it to try to talk you out of leaving.

3. What happens the moment you confirm

As soon as you confirm, and before you have gone anywhere:

• Your account is locked. You are signed out and you cannot sign in again — not on that device, not on another one, not by resetting anything.
• Every session is ended. Sessions on other devices stop working. For up to thirty seconds, a request that was already in flight may still be honoured; after that, nothing is.
• Notifications addressed to you stop. Every device you ever registered for push is switched off at that moment, so nothing we send to a person — a prayer reply, a session reminder, a message alert — is addressed to your phone again. One exception, and it is a real one: broadcast subscriptions are held by Google, not by us. If your device subscribed to a church's announcement broadcasts, that subscription lives inside Firebase against the device itself and we have no way to cancel it from our side. Those clear when the app is signed out and someone else signs in on that device, or when the app is removed. If you want them to stop at once, uninstall the app.
• Your account is marked for permanent deletion, and the app tells you the date that will happen.

From this moment your account is gone as far as everyone else is concerned. Nobody can find you, message you, or see your profile.

4. The thirty days after that, and changing your mind

Permanent deletion does not happen the same day. Your account stays locked and hidden for thirty (30) days, and then a job runs and erases it for good.

The thirty days exist for one reason: people change their minds, and people are sometimes deleted by somebody else in a bad moment. A deletion that cannot be undone for a month is kinder than one that cannot be undone at all.

If you change your mind, email us within those thirty days. Recovery is done by hand — there is no button for it, and you cannot sign in to reach one, because your account is already locked. Write to privacy@promisedlandlabs.com from the address on the account, or use the form on this page, and say you want the deletion stopped.

What we do when that email arrives, so you know it is a real procedure and not a hope: a person verifies the request, and then runs a single operator action that does both halves of the reversal — it clears the mark that the deletion job looks for, so your account is no longer queued for erasure, and it re-enables your sign-in identity, so you can actually get back in. Doing only one of those would leave you with an account that either still gets destroyed on day thirty or that exists but can never be signed into; the tool does not let them come apart. Every recovery is recorded — who did it, when, and why.

You will be able to sign in again once it is done. You may have to turn notifications back on for that device, because they were switched off when you confirmed.

After the thirty days, we cannot bring the account back. Not partially, not with effort, not as a favour. The data is gone. Please do not rely on us making an exception, because by then there is nothing to make an exception with.

Our Privacy Policy records the outer limit: deleted account data is permanently deleted within ninety (90) days.

One honest qualification to that ninety days. It describes our live systems, and there it holds — the erasure runs on day thirty. It does not yet describe our disaster-recovery backups. Encrypted database snapshots are taken on a schedule and shipped to cold storage, and the automatic deletion of old snapshots is currently switched off, so snapshots taken before your deletion can outlive the ninety-day mark. Nothing reads them except a restore, they are not searchable, and they are never used to serve the product; if we ever had to restore one, we would re-apply your deletion to the restored data. But we are not going to print a ninety-day number and quietly mean "except in backups". Turning that pruning back on is open work, and it is recorded as such.

5. What is deleted

When the thirty days end, the following is deleted outright:

• your profile — your name, email address, phone number, photograph, date of birth, baptism date, gender, address and app preferences are all erased from the account record. Your email address is replaced by a meaningless placeholder rather than emptied, for a boring technical reason: the column cannot be left blank, and two blank ones would collide. The placeholder is not an address, is not deliverable, and cannot be turned back into yours. What survives is described in Section 6.1 — a stub of a row carrying an internal identifier and the fact that the account was deleted, which the retained financial records point at;
• your sign-in account, which is removed from our identity provider entirely;
• your church memberships and any member codes tied to them;
• your messages' encryption keys, so nothing further can be decrypted for you (Section 7 explains what this does and does not do to the messages themselves);
• your prayer activity — the prayers you prayed for other people, and your prayer history;
• your notification history and anything scheduled to be sent to you;
• your event registrations, group memberships, and the birthday and anniversary entries your church's calendar was built from. One narrow exception, because it is a real one: if another admin has already recorded a birthday greeting to you, the record that a greeting was sent survives. It holds no name, no date and no message — only two internal identifiers — and it is not reachable from your account, which is why it is not swept. It is named here rather than left out;
• your Bible plan progress, trivia scores and statistics, sermon notes, watch progress, and the speakers you followed;
• your files — profile photographs, uploads, and any attachments you sent to support;
• your support tickets in Nlarj — the subject and the text you wrote, the email address recorded on them, anything you wrote in the ticket's replies, and any files you attached. What remains of a ticket is an empty shell: the internal identifier of the account it came from, the dates, and the reference that links it to our helpdesk. Replies written by our support staff are kept as their record of how the request was handled, so if a member of staff quoted you back to yourself, that quotation survives. And none of this reaches the helpdesk itself. Support runs on Atlassian Jira Service Management, and the copy of your ticket held there — including the email address it was raised from — is not anonymised when your account is erased. We know; it is open work, not a decision. Section 2 warns you before you use the form that creates one;
• your chat memory held by the AI assistant;
• your bank and tax details, if you are a counselor and gave us any. These are erased, not anonymised.

6. What we keep, and why

We keep some things. We would rather tell you exactly what, than describe it in a way that sounds smaller than it is.

There are two different reasons, and they deserve to be told apart.

6.1 Kept because the law requires it

We do not have a choice about these, and neither do you. Where the record contains your personal details, we strip them out and keep only what the law needs: the amounts, the dates, the reference numbers.

6.2 Kept because it belongs to somebody else

These are not legal obligations. They are a judgement we made, and you should know we made it.

Some of what you put into Nlarj stopped being only yours the moment somebody else relied on it. A prayer that forty people have prayed for is not only your prayer any more. A church's record of who was baptised is the church's record. We keep those, and we take your name off them.

Section 7 says what this looks like in practice.

7. What other people still see

This is the part people are most often surprised by, so we would rather be blunt about it.

Your prayer requests stay, without your name. The words of a prayer request remain where they were, and the people who have been praying for it can still pray. Your name is removed, the request is marked anonymous, and any location attached to it is stripped. If your prayer request contains details that identify you — and many do, because that is the nature of asking for prayer — removing your name does not remove those details. If you have written something you do not want left behind, delete that prayer request yourself before you delete your account.

Your messages stay in other people's conversations. Nlarj group and direct messages are end-to-end encrypted, which means the copy of a message you sent lives on the phone of the person who received it, and we cannot reach it. When your account is deleted, your name on those messages is replaced with "[deleted]" and your keys are destroyed. The message itself does not disappear from their device, and we cannot make it. This is a consequence of the encryption that protects the conversation in the first place, and it is not something we can switch off for you.

Your church's records stay. Where a church holds a record of a baptism or a wedding you took part in, that record is a church record. We keep it and remove your name, the date and the officiant remain, and the church can still show that the ceremony happened. Your ordinary membership row is deleted; where a church record depends on it, the row stays and is emptied of you instead, marked as departed.

Counseling records stay with the guide. Where you had guidance sessions, the session and its billing remain as the guide's professional and financial record. Your identity is removed from them. The session notes themselves are kept in full, for seven years, as a therapeutic record.

Things you created for a group stay. A sermon, an announcement or a group you set up does not vanish and leave a hole in a church that is still using it. It stays.

For a group you set up, the "created by" becomes nobody. Your name comes off it and the group carries on.

For sermons and announcements, it does not yet, and we are not going to pretend otherwise. The earlier version of this page said the "created by" became nobody for all three. That was not true of sermons or announcements when it was written, and it is still not true now. These are stored in a way that lets us find everything a church published, but not everything a person published — there is no index from you to them — so we cannot currently find your name on them to remove it. What is retained is your internal identifier as the author, not your name, email or photograph, and it is not displayed to anyone browsing the app. Building the index that would let us erase it properly is open work, recorded as such. If a sermon or announcement you posted names you in its own text, delete it yourself before you delete your account — the same advice Section 7 gives for prayer requests, and for the same reason.

What we cannot reach at all: anything anyone screenshotted, copied, forwarded outside Nlarj, or wrote down. We are not able to delete that, and we will not pretend otherwise.

8. If you lead a church, or guide people through Nlarj

Two things can stop a deletion, and both of them are about not leaving other people stranded. Neither is permanent, and neither is us refusing.

If you are the only administrator of a church, you cannot delete your account yet. A church whose only admin disappears is a church nobody can run — no one can add members, manage the calendar, or reach the congregation. Make somebody else an administrator first, and then delete.

The app does not yet name the church. It tells you that a church is blocking the deletion; it does not say which one, and for someone who administers more than one church that is not much help. The identifier is sent to the app but there is no church name attached to it, so there is nothing we can honestly print. Fixing that is open work. In the meantime, if it is not obvious which church it is, write to privacy@promisedlandlabs.com and we will tell you.

What the app will now tell you correctly is the difference between "you are the only administrator" and "we could not check whether you are". Those are different answers and the app used to show the first for both — so if the service that performs the check was briefly unreachable, you were told, as a fact about yourself, something nobody had verified, and sent off to appoint an administrator you may not have needed to appoint. The app now shows what the server actually said, including when what it said is "try again shortly".

If you are a counselor with a payout already on its way to you, you cannot delete your account yet. Wait until it has cleared, and then delete. We would rather you were paid.

Two limits on that check, because "we will stop you" is a promise and it should not be larger than the thing behind it:

• It looks at payouts that have been created, not at earnings that have not yet been turned into one. Money sitting in completed-but-unpaid session earnings will not stop the deletion. Those earnings records survive the deletion (Section 6.1 keeps payout and billing records for seven years), so the amount is not lost and can still be paid — but you should settle it before you delete rather than rely on the app to notice.
• If the check itself cannot run, we let the deletion through. If the payments service is unreachable at that moment we do not trap you in an account you have asked to leave; we allow the deletion and reconcile the money by hand. The opposite choice — blocking you because a server of ours was down — is the worse one. (The other block, being a church's only administrator, does the reverse: if that check cannot run we stop and ask you to try again, because a church left with no administrator is not something anyone can reconcile afterwards.)

If either applies to you and you are leaving, write to privacy@promisedlandlabs.com so a person can settle it with you.

If your deletion is already scheduled, asking again does nothing — the app will tell you it is already in hand, and remind you that you have thirty days to change your mind.

Two things are worth knowing if you are a counselor, because they differ from an ordinary member:

• Your professional record is kept and anonymised, not erased. Your licence number, its state and expiry, your specialisations, your years of experience and your verification history remain, with your name, email and photograph removed and your listing deactivated. This is the record of a person having been verified to guide others, and it is kept.
• Your bank and tax details are erased outright. Not anonymised — erased. What remains is the payment processor's own account reference, which we need to reconcile payments already made.

9. Children's profiles and households

If you set up profiles for your children, or you share a household with another adult, deleting your account does not delete them.

Your link to the child's profile is removed and marked with the date it ended. The child's profile itself, and the household, are kept if another guardian or another adult in that household remains. A child should not lose their profile, their check-in history, or their other parent's access because one guardian left.

If you are the only guardian remaining, contact us at privacy@promisedlandlabs.com before deleting so the child's profile is handled properly, rather than left without an adult attached to it.

10. How this fits with our other documents

This page describes how deletion works. It does not create rights that our Privacy Policy does not already give you, and it does not take any away.

• Your rights of access, correction, portability and erasure, and how to exercise them, are in the Privacy Policy, Section 7.
• What we retain and for how long is in the Privacy Policy, Section 6. If this page and that table ever disagree, the Privacy Policy is correct and this page needs fixing — please tell us.
• Deleting your account ends your access to the Platform. Anything in the Terms and Conditions that survives termination continues to apply.
• Deleting your account does not, by itself, cancel a subscription your church holds with us, or a payment already in progress.

11. Grievance Officer and contact

• To delete your account, or to ask about a deletion in progress: privacy@promisedlandlabs.com, or the form on this page.
• Data Protection Officer / Data Fiduciary (DPDP Act, 2023): Ruth Sumanchupalli, privacy@promisedlandlabs.com.
• Grievance Officer (IT Rules 2021 Rule 3(2)): Ruth Sumanchupalli, Promised Land Labs Private Limited, legal@promisedlandlabs.com, 6/1019, GUNTAKAL, Guntakal, Guntakal, Ananthapur- 515801, Andhra Pradesh, India. Acknowledgement within 24 hours; resolution within 15 days per Rule 3(2)(c).
• General support: support@nlarj.app

If any part of this page is inconsistent with Indian statute, the statute prevails.