This page explains how to delete a LynxSprint account, what happens when you do, and what is kept. It applies to the web application and the mobile apps alike, whether you signed up yourself or were invited by an employer.
1. Delete your account yourself
You can start deletion at any time, without writing to anybody. Sign in to the web application and confirm the request:
In the iOS or Android app: Profile, Delete my account.
If you are the only owner of an organization, you must first transfer ownership to another member or request deletion of the organization, so that it is not left with nobody who can run it. Both are in the web application under Settings, Organization.
2. What happens, and when
- Your account is locked immediately. From the moment you make the request, nobody can sign in to it, in the web application or in the apps.
- It is erased within 30 days. The gap is there so that a request made by mistake can still be stopped.
- We email you a confirmation that states the date the erasure will be complete.
- To stop it before that date, reply to that email or write to contact@lynxsprint.com. Once the erasure has run, it cannot be undone.
Deleting an entire organization removes every record inside it, including projects, work items, time entries, timesheets, attachments and Library articles. It cannot be undone.
3. If your employer invited you
LynxSprint is used by organizations. If you were invited to one, your employer controls that organization and its records, and we process them on their instructions. In that case we cannot delete approved time, timesheets or other employment records on your request alone. Ask your organization's administrator about those.
What you can always do is delete your own account, which removes your sign-in identity: the email address and authentication data that lets you log in. What that cannot do is remove records your employer is required to keep. Section 5 sets out which is which.
4. If you cannot sign in
Email contact@lynxsprint.com from the address on the account, with the subject Account deletion. Tell us:
- The email address you sign in with.
- The organization name, if you know it.
- Whether you want the whole organization deleted, or only your own account.
Emailing from the address on the account is what lets us verify the request. If you cannot, write from any address and we will verify another way rather than acting on an unverified instruction.
We acknowledge every request within five working days. Once verified, deletion completes within 30 days. We will tell you when it is done, and we will tell you first if any part of the request cannot be carried out, with the reason.
5. What is deleted, and what is kept
Deleted: your profile, your sign-in identity, your draft and unapproved time, work items you authored where the organization is also being deleted, your uploaded files, your comments, and your messages. A deleted message shows as "This message was deleted", so the replies around it still read in order.
Retained, in the cases below, with the reason:
- Approved and locked time records
- An approved timesheet is a financial and employment record your employer must keep. It stays with the organization under their obligations rather than ours, de-identified so that it is no longer linked to you, and it is the reason an employee cannot unilaterally erase one.
- Entries in the audit trail
- The audit trail is append-only by design. Removing an entry would break the hash chain that makes the rest of it verifiable, so the events are kept. They record an identifier rather than your name, and once your profile is anonymised that identifier no longer leads to you.
- Backups
- Erasure applies to the live system. Backups are not edited, because a backup somebody has reached into is no longer a backup, so they keep the data until they expire under their retention period.
Where a record is retained, it is disassociated from you where the record still makes sense without your name, and we do not use retained records for any purpose beyond the obligation that required keeping them.
6. Mobile apps
Deleting the app from a device does not delete your account. The apps sign in to the same account as the web application, so one request covers all of them at once. In the app, Profile, Delete my account opens the same page as the button in section 1. Nothing about your account is stored on the device beyond your session, which is removed when you sign out.
7. Your rights
Deletion is one of several rights you hold over your personal data. The others, including access, correction and objection, are set out in our Privacy Policy, and employees can read what an employer can and cannot see in the Employee Privacy Notice.
The controller for these purposes is Pixbots Private Limited. If you are not satisfied with how we handle a request, you may complain to your local supervisory authority.