Deleting your QuickISO account
Version 1.0. Published 1 October 2026, updated 20 October 2026.
This page explains how to delete an account in QuickISO, the app for building and running an ISO/IEC 27001 management system, developed and published by Axperts Dariusz Zalewski, Szczecin, Poland. It applies to the QuickISO apps for iPhone and Android and to the web application at eu.quickiso.app, which share one account. Questions: [email protected].
Deleting the app from your phone does not delete your account. Before you start, you may want to download your data: once the account is erased it cannot be recovered.
In the app
- Open QuickISO and sign in.
- Open Account and choose Delete account.
- If the app asks for it, enter the code from your authenticator app, or one of your recovery codes.
- For each workspace you own alone, choose whether to delete it too or to make someone else an owner first.
- Confirm. The app signs you out and removes your sign in and any unsent answers from the phone.
On the web
- Sign in at eu.quickiso.app with any method you use: password or Google, always followed by your code.
- Go to eu.quickiso.app/account/delete.
- Enter your code if the page asks for it, decide about each workspace you own alone, and confirm.
If you cannot sign in
Go to eu.quickiso.app/delete-account and choose that you cannot sign in. We email a single use link, valid for 60 minutes, to the address of the account. The link asks for your authenticator code or a recovery code, and with a correct code the deletion is scheduled exactly as above.
Without a code, or if you own a workspace alone, the request comes to us and nothing is deleted yet: access to a mailbox alone never deletes an account. We confirm that the request is really yours, through a channel we already know, and answer within one month. You can also write to [email protected] from the address of the account, and we handle it the same way.
What happens, and when
- At once. Every session on every device ends. We email you the date the deletion takes effect. The other members of any workspace you chose to delete are told by email, and that workspace becomes read only.
- For 30 days. Nothing is erased. If you sign in during this time, with your code as always, you can only cancel the deletion or sign out. Cancelling restores the account and its workspaces as they were.
- After 30 days. The account is erased, and we send a last email before your address is removed.
Workspaces you own alone
A workspace with no other owner cannot be left without one. Before you delete your account, choose for each such workspace: delete it together with your account, after the same 30 days, or make another member an owner first in the workspace's member settings, after which it stays with them. If other people work in a workspace you delete, they lose access to it, so consider exporting it first: its owners can export all of its content, with its evidence files, from the workspace settings.
What is deleted
- Your name and email address, which are replaced by a pseudonym.
- Your password, authenticator secret, recovery codes, passkeys and sessions.
- Your connection to Google.
- Your memberships of workspaces.
- The workspaces you chose to delete, with all their content and files.
What is kept, and for how long
- The audit trail. It keeps the account's identifier, which then shows a pseudonym, together with the network address and the user agent recorded with each of its entries, and the email address recorded when company single sign on linked or created an account. The trail is not purged, because a compliance record that can be edited is worth nothing, so these stay for as long as it does.
- Records in other organizations' workspaces. What you created in a workspace of another organization, such as an approved document or a reviewed piece of evidence, stays in that workspace and shows the pseudonym, because it is part of that organization's management system.
- Records of the terms you accepted and of your deletion request. They stay with the pseudonymized account, as the record of what was agreed and of what was done.
- Usage events and AI job metadata. They keep the pseudonymized identifier until they are purged after 12 months.
- Backups. They keep everything until they expire: daily sets after 14 days, weekly after 56, monthly after 365, pre deployment after 30 and manual after 90.
The privacy policy describes all of this in full, in section 12.

