Account data lifecycle

Apple subjects, refresh tokens, and account nicknames are encrypted at rest.
Apple email and avatar data are not requested or stored.
Deleting an account removes its session, profile, referral, grant, and mutable account records in the same local transaction before Apple revocation is retried.
Pseudonymous immutable credit-ledger entries, StoreKit transaction audit data, and time-limited anti-abuse tombstones remain after deletion where required to prevent replay, preserve financial integrity, and stop repeated trial abuse.
Logs must never include Apple subjects, credentials, tokens, or nicknames.