1. How to start deletion
If you have a TornCat Mossos account, you can request deletion of the account and associated data from the app or from this website.
Inside the app
- Open TornCat Mossos.
- Go to Profile.
- Open Account and security.
- Select Delete account and data.
- Confirm the request following the security steps shown in the app.
If the account uses Sign in with Apple, the app requests a recent identity confirmation and the server attempts to revoke the Apple authorization before finishing. If Apple cannot confirm automatic revocation, TornCat deletion continues and the app explains how to select TornCat and stop using the Apple ID from iPhone, iPad or account.apple.com.
Outside the app
Send an email to [email protected] with the subject “TornCat Mossos — Delete account and data”. Use the email linked to the account whenever possible.
If you cannot access the associated email, explain the situation and provide enough information to reasonably verify that you are the account holder. Do not send passwords, institutional credentials, badge numbers or sensitive police information.
2. What is deleted
Account deletion means deleting or unlinking data associated with the account, including where applicable:
- user profile, linked email and account settings;
- service configuration, calendars, shifts, vacation, leave, blue days, user-marked sick leave, court entries, notes, overtime extensions and reminders;
- Jornada, Radar and derived calculations;
- connections, sharing preferences, invitations and change/coverage requests associated with the account;
- session tokens and account-linked technical data when no longer necessary.
The automatic flow is shown as complete only after the server confirms deletion. If the response cannot be confirmed, the app does not perform destructive local cleanup or sign out as though it had finished; it allows a safe retry or contact with support.
3. Data that may be temporarily retained
Some data may be retained for the time strictly necessary if there is a legal obligation, security need, abuse prevention need, incident resolution, technical audit, future billing or defense against claims. When this happens, use will be limited to that purpose.
The process temporarily retains a minimal technical operation record —pseudonymised account and operation identifiers, provider, status, result codes, attempts and timestamps— to prevent duplicate deletion, recover interruptions and evidence completion. Ephemeral Apple challenges retain the technical account/session binding, nonce hash, expiry and consumption state; the nonce and authorisation code are not stored in plaintext. If Sign in with Apple is linked, a technical revocation credential may remain encrypted and server-restricted while the account is active and, after the request, only during limited revocation retries.
Apple challenges expire after five minutes. After confirmed revocation or the TN3194 fallback, the encrypted credential is deleted. Terminal technical records are deleted after seven days; anti-replay fingerprints and minimal manual evidence may be retained for up to thirty days, followed by seven days of terminal retention. A scheduled backend task enforces these expiries and must be monitored before Apple is enabled publicly.
4. Data exported or shared outside the app
Account deletion deletes or unlinks data controlled by TornCat Mossos. It cannot automatically delete files, PDFs, Excel files, screenshots, WhatsApp messages, emails, device calendars, local copies or content the user has shared or saved in external services. Those copies must be managed from the relevant app, device or external service.
5. Timeframe and confirmation
The in-app flow is processed during the operation when the backend is available. Requests sent to support are handled without undue delay and within the applicable legal period; if additional information or a permitted extension is needed, the same channel will be used to inform the requester.
The automatic flow confirms the result inside the app. Requests started by email receive a response through that channel after verification and processing are complete.
6. Future payments or subscriptions
The current version does not offer subscriptions. If Apple- or Google-managed subscriptions are added in the future, deleting the TornCat Mossos account will not automatically cancel one; it must also be cancelled in App Store or Google Play.
7. Identity verification
To prevent fraudulent deletion, reasonable identity verification may be requested. The in-app flow uses the authenticated session and, for Apple accounts, a recent Apple confirmation; external requests may require confirmation from the associated email. Passwords, tokens, Apple codes or institutional credentials will not be requested.
8. In-app route
The visible in-app route is: Profile → Account and security → Delete account and data.
The external web route for Google Play is this page: https://torncat.com/en/delete-account/.