signalapp / Flock

Private contact and calendar sync for Android.
https://signal.org/blog/flock
358 stars 80 forks source link

What to do upon login error because of suspended account (or forgotten password) #71

Open crocketeer opened 9 years ago

crocketeer commented 9 years ago

I assume accounts get deleted or at least suspended when not paying after the trial period. Then you can't sign in anymore let alone manage your subscription or unregister the account. How are users supposed to proceed? Looks like the only option left is to uninstall the app? There's no option to delete the Flock account only. Creating another Flock account on the device (in order to move locally cached contacts and calendars to a different server) is blocked. Users are wondering if they will lose their data in case they uninstall Flock.

Sorry for sounding a bit negative. I'm not, really. Flock is a great app. Just trying to improve it.

rhodey commented 9 years ago

@crocketeer these are great questions that unfortunately I don't yet have any great answers for.

The default contact app (People) allows export of contacts to storage so Flock users could use this get their contacts out of Flock. As far as I'm aware there is no feature in the default Calendar app or anything within stock Android that allows for exporting of calendars. For this I believe there are a few 3rd party apps that could be installed but I haven't spent much time researching this.

I would prefer that Flock support export of contacts and calendars in-app and that we would not have to suggest that users install 3rd party apps. These are features on my todo list and with any luck I'll get to them soon.

My opinions of what the users should expect when their trial period runs out are obviously a bit biased :P could you describe to me what behavior you might expect or be most comfortable with?

Thanks for your support of the project, these issue reports are all important.

hgomersall commented 9 years ago

Tied in with this, presumably, is what happens when the user forgets their password! I'm currently in the position where I can't change much due to me choosing a super secure yet memorable pass phrase and then promptly forgetting it.

rhodey commented 9 years ago

commit 10510f846646edfdd5aac356992fe7c243681023 helped with some of this by:

  1. revising language on the account registration UI to include If your password is forgotten it cannot be reset.
  2. dropping the requirement that a user know their current password to change their password.
  3. adding a count down to the subscription expiration notification.

I think this could be improved upon further by adding a sort of credentials backup feature, where the account username is encrypted by the account password and then sent in an email or stored on external storage. Then a 'forgot my password' UI could be created where the user could take the encrypted username string from their email or wherever, paste it in some text box, and then have the opportunity to guess the password as much as they want. The credential backup would have to be updated every time the password changed.