Your data, your choice.
Disconnect one mailbox
- Open Companion and choose Settings, then Connected mailboxes.
- Select Disconnect for the connected account.
- Confirm the action. Companion stops syncing that mailbox and removes its cached messages and source-linked reminders.
Gmail messages are unchanged. You can also revoke Companion in your Google account's third-party app permissions. Saved journal entries and past Companion chat history may still contain information from that mailbox. Source-backed reflection suggestions retire when the cached email is removed.
Choose email retention
In Settings, choose to keep cached email for 30, 90, 180, or 365 days from receipt, or until disconnect. Expiry removes cached message content within an hour and excludes expired messages from future imports. Source-linked saved memories and research and in-flight agent context are removed when their source expires. Reminder source details and supporting excerpts, past chat history, and independently confirmed memories remain until you delete them or delete Companion data.
Remove all Companion content yourself
- Sign in to Companion on the web or iPhone.
- Open Settings and choose Delete my Companion data.
- Read the deletion summary, type DELETE, and confirm permanent deletion.
This removes your connected mailbox credentials, cached emails, all reminders, chats, saved memories, research, care context, journal entries, care-rhythm preferences, weekly progress, push registrations and associated delivery records from the active application and signs you out. Companion attempts to revoke provider access and reports if you must also remove access in your provider's app permissions. It does not delete Gmail messages or the shared sign-in account used by other services. A minimal account identifier and deletion timestamp remain to block older in-progress requests from restoring deleted data.
Security metadata follows a separate lifecycle from inbox content. Companion-attributed login audit records are removed after 90 days in bounded daily cleanup runs. Shared sign-in audit records that cannot safely be attributed to Companion are preserved so another service's authentication history is not changed. Operational runtime logs have a 30-day journal retention policy, with file rotation and storage limits. These controls do not establish deletion of historical or provider-held copies.
Recovery backups, if present, follow the host's separate lifecycle. If you cannot sign in or need confirmation about recovery copies, email [email protected] from your account address. Do not send passwords or provider credentials.
For details about processing and service providers, read our privacy policy.