Skip to content

Account & authentication

How verxion handles sign-in, sessions, and account deletion. OAuth-only — no passwords.

verxion is OAuth-only. Sign in with Apple or Google. There’s no password to set, no recovery email to verify, and no way to log in by other means.

Why OAuth-only

Two reasons:

  1. Less attack surface. No password to leak, no reset link to phish, no recovery email to take over.
  2. Faster setup. The first time you visit, you tap one button and you’re in. Same flow on every device.

Signing in

  1. Open the setup page
  2. Pick Sign in with Apple or Sign in with Google
  3. Accept the legal terms (one-time, on first sign-in only)
  4. You’re in — copy the MCP snippet for your client

On first sign-in, verxion creates your account automatically. There’s no separate signup page — the login page is the signup page.

When you sign in for the first time, you check a box accepting the terms and privacy policy. The acceptance is recorded server-side with a timestamp. You can review and re-export your data at any point via the app.

Sessions

A session is created in your browser when you sign in via OAuth. The MCP snippet you copy is bound to that session. Signing out from the setup page invalidates the snippet immediately — your AI client gets a 401 on the next call.

If you sign in on a new device, a fresh session is created there. The two sessions are independent; revoking one doesn’t revoke the other unless you delete your account.

Switching accounts

verxion supports one account per OAuth identity. Signing in with a different Apple/Google account creates a separate verxion account.

To switch between accounts:

  1. Sign out from the setup page
  2. Sign in with the other Apple/Google identity
  3. Copy the new MCP snippet — old snippets stop working

Deleting your account

Account deletion is permanent and immediate. We do not soft-delete or hold a grace period.

  1. Open your account settings in the app
  2. Tap Delete account
  3. Confirm the deletion

What happens:

  • All your training, nutrition, and profile data is removed
  • All active MCP sessions are invalidated — your AI client gets 401 on the next call
  • Your OAuth link to Apple/Google is severed; signing in again with the same identity creates a fresh, empty account

Backups: deleted data may persist in encrypted backups for up to 30 days, after which it is purged.

Privacy

See the privacy policy for the full picture. The short version:

  • Your training and nutrition data stays in verxion; we don’t sell it
  • AI clients (ChatGPT, Claude) see only what you ask them to — they don’t have ambient access
  • You can export your data at any time
  • Account deletion removes everything within 30 days, including backups