Your data rights

Two promises, kept in the product itself: you can take everything with you, and you can make everything disappear. Both are self-serve, complete, and require no email, no support ticket, no waiting on a human.

Export everything

From any Humrah app: Settings → Account → Your data → Export my data

  1. Tap Export my data. We assemble a single ZIP in the background and notify you when it's ready (usually minutes).
  2. Download it from the same screen. The link stays live for 7 days, then the file is deleted from our servers.

The ZIP contains everything, in open formats: your account details, every uploaded book (the original EPUB), covers, highlights and notes (Markdown + JSON), bookmarks, reading sessions and positions, recaps, your AI conversation history, practice questions, shelves, social activity, voice audio you paid to synthesize, and your sync journal. A README inside explains the layout.

What's not in it: nothing of yours is held back. The only exclusions are our internal operational records (server prompts and security token hashes) — none of which contain data you gave us that isn't already in the export.

Delete everything

From any Humrah app: Settings → Account → Danger zone → Delete my account

  1. Type your account email to confirm — deliberately, exactly.
  2. Your account enters a 7-day grace period. Nothing is lost yet; you can cancel from the same screen at any point in those 7 days. The grace period is the confirmation step.
  3. After 7 days, deletion runs: a hard delete, not a deactivation. Books, highlights, notes, positions, conversations, voice profiles and attestations, social activity, sync history, telemetry (if you'd opted in) — all gone, irreversibly. Your voice profile is also deleted from our voice provider.
  4. You'll get one goodbye email. Your email address is freed — signing up again later starts a completely blank account.

Backups: encrypted backups expire on a 30-day cycle, so deleted data ages out of every backup within 30 days of the deletion running. We keep a minimal deletion receipt (an audit record that a deletion happened, not your data) as required for legal accountability.

Smaller rights, same spirit

The legal footing

These controls implement your rights of access and portability (GDPR Art. 15 & 20), erasure (GDPR Art. 17), and the corresponding rights under India's DPDP Act. If anything here doesn't work as promised, that's a bug of the highest order — tell us at [email protected]. You can also complain to your local data-protection authority (EU) or the Data Protection Board of India.