HSM Software Qisma

Qisma

Account & Data Deletion

Last updated November 2026

← Privacy policy

Qisma gives you complete control over your account. If you created an account to synchronize shared groups across devices, you can permanently delete it directly from within the application at any time without manual review. If you cannot access the application, an assisted deletion procedure is available through customer support.

Scope & Operating Modes

How data deletion operates depends on how you use Qisma:

How to Request Deletion From Inside the App

  1. Open Qisma on your device.
  2. Sign in to the account you want to delete, if you are not already signed in.
  3. Open the Settings tab and navigate to the Account section.
  4. Tap Delete account at the bottom of the screen.
  5. Review the deletion summary and warnings.
  6. Authenticate again: For your security, the app requires recent re-authentication by re-entering your password or confirming your Google account.
  7. Confirm permanent deletion. The deletion pipeline executes immediately.

The Technical Deletion Pipeline

When you confirm deletion in the app, Qisma executes an automated deletion workflow:

  1. Ownership Verification: The application verifies whether you are the sole owner of any active shared group. If you are, deletion is rejected until you transfer ownership or delete the group.
  2. Server Preparation: The application invokes a secure Cloud Function (prepareAccountDeletion), preparing your account record for deletion.
  3. Permission Revocation: Your cloud access permissions across all shared groups (groups/{groupId}/access/{accountId}) are revoked.
  4. Authentication Erasure: Your user identity record is permanently deleted from Firebase Authentication servers.
  5. Local Cleanup: Local SQLite records associated with your cloud account are marked as deleted, and cached authentication tokens are purged.
  6. Session Reset: The application signs out immediately, returning to unauthenticated Guest Mode.

What is Deleted Immediately

What is Retained and Accounting Integrity

To preserve operational and financial integrity, specific categories of records are retained:

The Sole-Owner Guard

If you are the sole owner of an active shared group, you cannot delete your account while that group remains active. This guard ensures that shared groups are not left orphaned without an administrator to manage membership or approve settlements.

Before deleting your account, you must either:

Assisted Support Deletion (Unable to Access the App)

The primary and immediate pathway for account deletion is directly inside the application (Settings → Account → Delete account), where identity verification is performed automatically via your sign-in provider. If you cannot sign in to the application (for example, if your device is lost or inaccessible), you may submit an assisted deletion request to customer support. The operational workflow proceeds as follows:

  1. Request Submission: Send an email from the exact email address registered with your Qisma account to hussein.mohamed.software@gmail.com with the subject line Qisma Account Deletion Request. Sending this email opens a support request; it does not automatically or immediately delete your account.
  2. Support Intake: An operator logs the request into our internal review registry. Anti-enumeration safeguards ensure that inquiries from unregistered email addresses do not disclose account status to third parties.
  3. Identity & Ownership Verification: To protect accounts against unauthorized or fraudulent deletion, customer support verifies that the request originates from the registered email account holder through email correspondence and standard domain validation.
  4. Sole-Owner Preflight Check: The operator verifies in Cloud Firestore whether your account is the sole owner of any active shared groups. If you hold sole ownership of an active group with other members, deletion is blocked until ownership is reassigned or the group is settled.
  5. Authorized Execution: Once ownership verification is confirmed and sole-ownership checks clear, an authorized operator executes cloud deletion. Your cloud group permissions are revoked, security tombstones are recorded, and your Firebase Authentication user identity is permanently deleted.
  6. Confirmation & Processing Timeline: A confirmation email is delivered to you upon completion. The manual review and deletion workflow is typically completed within 30 days of verified account ownership confirmation, subject to any necessary clarification or exceptional circumstances. Shared historical transactions remain available to surviving group participants to preserve group ledger balances. Local copies of records stored in SQLite on your physical device remain in your device's sandbox until you manually clear application data or uninstall the app.

Security Notice: Never send passwords, payment card details, or sensitive credentials over email. Qisma customer support will never ask you for your account password. Sending an email does not instantly wipe data; verified identity confirmation and sole-owner safety checks must be completed before deletion is executed.

Contact

If you have questions or requests regarding account or data deletion, please contact:

Email: hussein.mohamed.software@gmail.com

HSM Software

Learn more about how Qisma handles your information in our Privacy Policy.

All HSM Software privacy policies · Portfolio