---
title: "Delete Account"
method: DELETE
path: "/api/v1/user"
tags: ["User Profile"]
---

# Delete Account

`DELETE /api/v1/user`

## Request

- Base URL: `https://www.endlesstravelplans.com`
- URL: `https://www.endlesstravelplans.com/api/v1/user`
- Auth: HTTP bearer

Permanently delete the authenticated user's account and all associated
data, and revoke all access tokens.

Authorization is the valid bearer token, no password is required, so
social-login and guest/anonymous accounts (which have no password) can be
deleted too. This provides the in-app deletion path required by Apple
Guideline 5.1.1(v) and GDPR Art. 17. Related rows are removed via the same
DB foreign-key cascade the web delete-account form relies on.

A store subscription (App Store or Google Play) is not cancelled by deletion, so the answer
names it when one is still running.

## Response `200`

- union
  - object: Account deleted
    - `message` string
    - `store_subscription` string, nullable
  - object: Account deleted with a live store subscription
    - `message` string
    - `store_subscription` object
      - `platform` string
      - `product_id` string
      - `expires_at` string
      - `note` string

## Other responses

- `401`: unauthenticated: No valid bearer token was sent.
- `429`: rate_limited: A throttle or a per-account allowance refused the request; `retry_after` or `remaining` may be present.
- `500`

---

[API](https://skmtc.dev/endlesstravelplans/apis/endless-travel-plans-api.md) · [All operations](https://skmtc.dev/endlesstravelplans/apis/endless-travel-plans-api/llms.txt) · [OpenAPI document](https://skmtc.dev/endlesstravelplans/apis/endless-travel-plans-api/revisions/ae82ed3e4a8f?raw)