The in-app account deletion Apple and Google now require, plus a GDPR data export, packaged as two drop-in Supabase Edge Functions. Real code from a production app, genericized.It removes a user's storage and then their auth row in the correct order (database rows cascade), and returns the user's full data as one JSON download. Identity always comes from the caller's own JWT, so a client can never act on another account.Includes both Edge Functions, client helpers (deleteAccount + downloadMyData + getMyData), the foreign-key cascade setup, and a security guide. Single-project commercial use.The full write-up behind this kit: Account deletion that satisfies the app stores (and GDPR).