Delete account
You can delete your LeanStream account at any time. This page explains the process, which data we erase, and which data we must retain for legal reasons.
LeanStream is a service of Tradeo Consulting & Services GmbH, available as a web application and as a mobile app (iOS/Android).
1. How to delete your account
1.1 In the mobile app (recommended)
Open the LeanStream app on your iOS or Android device and navigate to Profile → Delete account. Once confirmed, your account is deactivated immediately: all sessions across all devices are ended, sign-in is blocked, and push notifications stop.
1.2 By email (all platforms)
Alternatively — for example if you only use LeanStream in a browser, or no longer have access to the app — send an email from the address registered with your account to datenschutz@leanstream.app with the subject “Account deletion”. The following link fills in the subject and body for you:
Please include in your email:
- the email address registered with your account,
- if known, the name of the organisation you belong to.
For identity verification we will reply to the registered email address; deletion starts after your confirmation. We process the request within the statutory 30-day period (Art. 12 (3) GDPR); typically much sooner.
1.3 Sole owner of an organisation
If you are the only owner of an organisation, deletion is blocked so the organisation does not become orphaned. Please transfer the owner role to another member (Members → Change role) or delete the organisation first. After that you can delete your account as described above.
1.4 Withdrawal
Within 30 days of your request you can withdraw the deletion by email to datenschutz@leanstream.app — provided final data erasure has not yet taken place. After that period the deletion cannot be undone.
2. Data that will be erased
2.1 Immediately on request
- Sessions and tokens: all active sessions on web and mobile are closed, magic-link and bearer tokens are revoked. Sign-in with your existing credentials is no longer possible.
- Push tokens for mobile notifications are deleted (Expo, Apple, Google).
- Account status: your account is immediately flagged as deleted and deactivated — sign-in is no longer possible. In organisations where you left posts, you subsequently appear to other members only anonymised as “Deleted user”.
2.2 After 30 days — final erasure
Once the 30-day withdrawal period has passed, the following data is permanently erased or anonymised:
- Profile data: name, email, profile picture, language preferences are overwritten.
- Authentication data: password hash and all sign-in credentials linked to your account are deleted.
- Personal attribution of your content: videos and posts you uploaded remain in the respective organisation and are anonymised as “Deleted user”. The organisation, not the individual user, owns this content; your personal link to it is removed.
- Usage data: watched videos, reactions and feed-sorting data are deleted.
3. Data we must retain
As a company based in Germany we are legally required to retain certain data beyond account deletion. Under Art. 18 GDPR processing of this data is restricted (“blocked”): it is no longer available for regular business operations and is accessed only for the legally mandated purposes (e.g. tax audits).
| Data category | Retention period | Legal basis |
|---|---|---|
| Invoices, payment records, accounting documents | 10 years from end of calendar year | § 147 AO, § 257 (4) HGB |
| Commercial letters, contract documents | 6 years from end of calendar year | § 257 (4) HGB |
| Security-relevant audit logs | max. 90 days | Art. 6 (1) (f) GDPR (legitimate interest in abuse prevention) |
| Server logs (IP, user agent, timestamp) | max. 14 days | Art. 6 (1) (f) GDPR (legitimate interest in operational security) |
After the applicable statutory retention period expires, this data is permanently erased as well.
4. Your rights under GDPR
Independently of account deletion, under the GDPR you have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection (Art. 21) and to lodge a complaint with a supervisory authority (Art. 77). Further information is available in our privacy policy.
5. Contact
The controller within the meaning of the GDPR is Tradeo Consulting & Services GmbH as named in the imprint. For data-protection and account-deletion requests please contact datenschutz@leanstream.app.
Last updated: July 2026