fix: Bug - Add logout in mobile version of settings, allow clearing data on android

Expose settings logout on mobile where the title bar is hidden, and enable
Capacitor data settings with storage visibility and local erase/sign-out.

Co-authored-by: Cursor <cursoragent@cursor.com>

toju-app/public/i18n/catalog/settings.json

@@ -262,12 +262,14 @@
       "localData": {
         "title": "Local data",
         "description": "Manage the folder that contains local messages, rooms, attachments, avatars, saved themes, and desktop storage.",
+        "descriptionMobile": "Review and erase the private app storage that holds local messages, rooms, attachments, and saved settings on this device.",
         "restartApp": "Restart app"
       },
-      "desktopOnly": "Data management is only available in the packaged Electron desktop app.",
+      "desktopOnly": "Data management is only available in the desktop app or native mobile app.",
       "currentFolder": {
         "title": "Current data folder",
-        "resolving": "Resolving data folder..."
+        "resolving": "Resolving data folder...",
+        "descriptionMobile": "Files are stored in the app's private data directory on this device."
       },
       "openFolder": "Open folder",
       "opening": "Opening...",
@@ -287,6 +289,7 @@
       "erase": {
         "title": "Erase user data",
         "description": "Remove local app data from this device and recreate an empty database.",
+        "descriptionMobile": "Remove local messages, rooms, attachments, and saved app data from this device.",
         "button": "Erase user data",
         "erasing": "Erasing...",
         "confirm": "Erase all local Toju data on this device? This cannot be undone."
@@ -301,6 +304,7 @@
         "importedWithBackup": "Imported data. Previous data was backed up to {{path}}.",
         "imported": "Imported data.",
         "erased": "Local data erased. Restart the app to finish resetting the session.",
+        "erasedMobile": "Local data erased. You have been signed out.",
         "operationFailed": "Data operation failed."
       }
     },

toju-app/public/i18n/en.json

@@ -1317,12 +1317,14 @@
       "localData": {
         "title": "Local data",
         "description": "Manage the folder that contains local messages, rooms, attachments, avatars, saved themes, and desktop storage.",
+        "descriptionMobile": "Review and erase the private app storage that holds local messages, rooms, attachments, and saved settings on this device.",
         "restartApp": "Restart app"
       },
-      "desktopOnly": "Data management is only available in the packaged Electron desktop app.",
+      "desktopOnly": "Data management is only available in the desktop app or native mobile app.",
       "currentFolder": {
         "title": "Current data folder",
-        "resolving": "Resolving data folder..."
+        "resolving": "Resolving data folder...",
+        "descriptionMobile": "Files are stored in the app's private data directory on this device."
       },
       "openFolder": "Open folder",
       "opening": "Opening...",
@@ -1342,6 +1344,7 @@
       "erase": {
         "title": "Erase user data",
         "description": "Remove local app data from this device and recreate an empty database.",
+        "descriptionMobile": "Remove local messages, rooms, attachments, and saved app data from this device.",
         "button": "Erase user data",
         "erasing": "Erasing...",
         "confirm": "Erase all local Toju data on this device? This cannot be undone."
@@ -1356,6 +1359,7 @@
         "importedWithBackup": "Imported data. Previous data was backed up to {{path}}.",
         "imported": "Imported data.",
         "erased": "Local data erased. Restart the app to finish resetting the session.",
+        "erasedMobile": "Local data erased. You have been signed out.",
         "operationFailed": "Data operation failed."
       }
     },

toju-app/src/app/domains/authentication/application/services/auth-token-store.service.spec.ts

@@ -43,4 +43,13 @@ describe('AuthTokenStoreService', () => {
 
     expect(service.getToken('http://localhost:3001')).toBeNull();
   });
+
+  it('clears every stored token', () => {
+    service.setToken('http://localhost:3001', 'token-abc', Date.now() + 60_000);
+    service.setToken('http://localhost:3002', 'token-def', Date.now() + 60_000);
+
+    service.clearAllTokens();
+
+    expect(service.hasAnyValidToken()).toBe(false);
+  });
 });

toju-app/src/app/domains/authentication/application/services/auth-token-store.service.ts

@@ -49,6 +49,12 @@ export class AuthTokenStoreService {
     this.writeStore(nextStore);
   }
 
+  clearAllTokens(): void {
+    try {
+      localStorage.removeItem(STORAGE_KEY);
+    } catch {}
+  }
+
   hasAnyValidToken(): boolean {
     const now = Date.now();
 

toju-app/src/app/domains/authentication/application/services/user-logout.service.spec.ts

@@ -0,0 +1,66 @@
+import '@angular/compiler';
+import { Injector, runInInjectionContext } from '@angular/core';
+import {
+  beforeEach,
+  describe,
+  expect,
+  it,
+  vi
+} from 'vitest';
+import { Router } from '@angular/router';
+import { Store } from '@ngrx/store';
+
+import { RealtimeSessionFacade } from '../../../../core/realtime';
+import { MessagesActions } from '../../../../store/messages/messages.actions';
+import { RoomsActions } from '../../../../store/rooms/rooms.actions';
+import { UsersActions } from '../../../../store/users/users.actions';
+import { UserLogoutService } from './user-logout.service';
+
+describe('UserLogoutService', () => {
+  let webrtc: { disconnect: ReturnType<typeof vi.fn> };
+  let store: { dispatch: ReturnType<typeof vi.fn> };
+  let router: { navigate: ReturnType<typeof vi.fn> };
+  let service: UserLogoutService;
+
+  beforeEach(() => {
+    vi.stubGlobal('localStorage', {
+      getItem: vi.fn(() => null),
+      setItem: vi.fn(),
+      removeItem: vi.fn(),
+      clear: vi.fn(),
+      key: vi.fn(() => null),
+      length: 0
+    });
+
+    webrtc = { disconnect: vi.fn() };
+    store = { dispatch: vi.fn() };
+    router = { navigate: vi.fn(() => Promise.resolve(true)) };
+
+    const injector = Injector.create({
+      providers: [
+        UserLogoutService,
+        { provide: RealtimeSessionFacade, useValue: webrtc },
+        { provide: Store, useValue: store },
+        { provide: Router, useValue: router }
+      ]
+    });
+
+    service = runInInjectionContext(injector, () => injector.get(UserLogoutService));
+  });
+
+  it('disconnects, clears persisted user scope, resets store slices, and navigates to login', () => {
+    service.logout();
+
+    expect(webrtc.disconnect).toHaveBeenCalledOnce();
+    expect(store.dispatch).toHaveBeenCalledWith(MessagesActions.clearMessages());
+    expect(store.dispatch).toHaveBeenCalledWith(RoomsActions.resetRoomsState());
+    expect(store.dispatch).toHaveBeenCalledWith(UsersActions.resetUsersState());
+    expect(router.navigate).toHaveBeenCalledWith(['/login']);
+  });
+
+  it('can reset client state without navigating away', () => {
+    service.logout({ navigate: false });
+
+    expect(router.navigate).not.toHaveBeenCalled();
+  });
+});

toju-app/src/app/domains/authentication/application/services/user-logout.service.ts

@@ -0,0 +1,28 @@
+import { Injectable, inject } from '@angular/core';
+import { Router } from '@angular/router';
+import { Store } from '@ngrx/store';
+
+import { RealtimeSessionFacade } from '../../../../core/realtime';
+import { clearStoredCurrentUserId } from '../../../../core/storage/current-user-storage';
+import { MessagesActions } from '../../../../store/messages/messages.actions';
+import { RoomsActions } from '../../../../store/rooms/rooms.actions';
+import { UsersActions } from '../../../../store/users/users.actions';
+
+@Injectable({ providedIn: 'root' })
+export class UserLogoutService {
+  private readonly webrtc = inject(RealtimeSessionFacade);
+  private readonly store = inject(Store);
+  private readonly router = inject(Router);
+
+  logout(options?: { navigate?: boolean }): void {
+    this.webrtc.disconnect();
+    clearStoredCurrentUserId();
+    this.store.dispatch(MessagesActions.clearMessages());
+    this.store.dispatch(RoomsActions.resetRoomsState());
+    this.store.dispatch(UsersActions.resetUsersState());
+
+    if (options?.navigate !== false) {
+      void this.router.navigate(['/login']);
+    }
+  }
+}

toju-app/src/app/domains/authentication/index.ts

@@ -1,5 +1,6 @@
 export * from './application/services/authentication.service';
 export * from './application/services/auth-token-store.service';
+export * from './application/services/user-logout.service';
 export * from './application/services/signal-server-auth.service';
 export * from './application/services/signal-server-authorize.service';
 export * from './application/services/signal-server-credential-store.service';

toju-app/src/app/features/settings/domain/logic/data-settings-capability.rules.spec.ts

@@ -0,0 +1,29 @@
+import {
+  describe,
+  expect,
+  it
+} from 'vitest';
+
+import {
+  supportsDesktopDataFolderActions,
+  supportsLocalDataManagement,
+  supportsMobileLocalDataErase
+} from './data-settings-capability.rules';
+
+describe('data settings capability rules', () => {
+  it('enables local data management on Electron and Capacitor only', () => {
+    expect(supportsLocalDataManagement({ isElectron: true, isCapacitor: false })).toBe(true);
+    expect(supportsLocalDataManagement({ isElectron: false, isCapacitor: true })).toBe(true);
+    expect(supportsLocalDataManagement({ isElectron: false, isCapacitor: false })).toBe(false);
+  });
+
+  it('limits folder, export, and import actions to Electron', () => {
+    expect(supportsDesktopDataFolderActions({ isElectron: true, isCapacitor: false })).toBe(true);
+    expect(supportsDesktopDataFolderActions({ isElectron: false, isCapacitor: true })).toBe(false);
+  });
+
+  it('allows erase on Capacitor shells', () => {
+    expect(supportsMobileLocalDataErase({ isElectron: false, isCapacitor: true })).toBe(true);
+    expect(supportsMobileLocalDataErase({ isElectron: true, isCapacitor: false })).toBe(false);
+  });
+});

toju-app/src/app/features/settings/domain/logic/data-settings-capability.rules.ts

@@ -0,0 +1,16 @@
+export interface DataSettingsPlatform {
+  isElectron: boolean;
+  isCapacitor: boolean;
+}
+
+export function supportsLocalDataManagement(platform: DataSettingsPlatform): boolean {
+  return platform.isElectron || platform.isCapacitor;
+}
+
+export function supportsDesktopDataFolderActions(platform: DataSettingsPlatform): boolean {
+  return platform.isElectron;
+}
+
+export function supportsMobileLocalDataErase(platform: DataSettingsPlatform): boolean {
+  return platform.isCapacitor;
+}

toju-app/src/app/features/settings/settings-modal/data-settings/data-settings.component.html

@@ -10,7 +10,11 @@
           <h4 class="text-base font-semibold text-foreground">{{ 'settings.data.localData.title' | translate }}</h4>
         </div>
         <p class="mt-2 text-sm text-muted-foreground">
-          {{ 'settings.data.localData.description' | translate }}
+          @if (supportsMobileLocalDataErase) {
+            {{ 'settings.data.localData.descriptionMobile' | translate }}
+          } @else {
+            {{ 'settings.data.localData.description' | translate }}
+          }
         </p>
       </div>
 
@@ -25,17 +29,17 @@
             name="lucideRefreshCw"
             class="h-4 w-4"
           />
-          Restart app
+          {{ 'settings.data.localData.restartApp' | translate }}
         </button>
       }
     </div>
   </section>
 
-  @if (!isElectron) {
+  @if (!supportsLocalDataManagement) {
     <section class="rounded-lg border border-border bg-secondary/30 p-5">
       <p class="text-sm text-muted-foreground">{{ 'settings.data.desktopOnly' | translate }}</p>
     </section>
-  } @else {
+  } @else if (supportsDesktopDataFolderActions) {
     <section class="space-y-4 rounded-lg border border-border bg-card/60 p-5">
       <div>
         <h5 class="text-sm font-semibold text-foreground">{{ 'settings.data.currentFolder.title' | translate }}</h5>
@@ -108,6 +112,7 @@
 
       <button
         type="button"
+        data-testid="data-settings-erase-button"
         (click)="eraseData()"
         [disabled]="busyAction() !== null"
         class="inline-flex items-center gap-2 rounded-lg border border-destructive/30 bg-destructive px-4 py-2 text-sm font-medium text-destructive-foreground transition-colors hover:bg-destructive/90 disabled:cursor-not-allowed disabled:opacity-60"
@@ -119,17 +124,48 @@
         {{ busyAction() === 'erase' ? ('settings.data.erase.erasing' | translate) : ('settings.data.erase.button' | translate) }}
       </button>
     </section>
+  } @else if (supportsMobileLocalDataErase) {
+    <section class="space-y-4 rounded-lg border border-border bg-card/60 p-5">
+      <div>
+        <h5 class="text-sm font-semibold text-foreground">{{ 'settings.data.currentFolder.title' | translate }}</h5>
+        <p class="mt-2 break-all rounded-lg border border-border bg-secondary/20 px-3 py-2 text-sm text-muted-foreground">
+          {{ dataPath() || ('settings.data.currentFolder.resolving' | translate) }}
+        </p>
+        <p class="mt-2 text-sm text-muted-foreground">{{ 'settings.data.currentFolder.descriptionMobile' | translate }}</p>
+      </div>
+    </section>
 
-    @if (statusMessage()) {
-      <section class="rounded-lg border border-primary/30 bg-primary/10 p-4">
-        <p class="break-words text-sm text-foreground">{{ statusMessage() }}</p>
-      </section>
-    }
+    <section class="space-y-4 rounded-lg border border-destructive/30 bg-destructive/10 p-5">
+      <div>
+        <h5 class="text-sm font-semibold text-foreground">{{ 'settings.data.erase.title' | translate }}</h5>
+        <p class="mt-1 text-sm text-muted-foreground">{{ 'settings.data.erase.descriptionMobile' | translate }}</p>
+      </div>
 
-    @if (errorMessage()) {
-      <section class="rounded-lg border border-destructive/30 bg-destructive/10 p-4">
-        <p class="break-words text-sm text-foreground">{{ errorMessage() }}</p>
-      </section>
-    }
+      <button
+        type="button"
+        data-testid="data-settings-erase-button"
+        (click)="eraseData()"
+        [disabled]="busyAction() !== null"
+        class="inline-flex items-center gap-2 rounded-lg border border-destructive/30 bg-destructive px-4 py-2 text-sm font-medium text-destructive-foreground transition-colors hover:bg-destructive/90 disabled:cursor-not-allowed disabled:opacity-60"
+      >
+        <ng-icon
+          name="lucideTrash2"
+          class="h-4 w-4"
+        />
+        {{ busyAction() === 'erase' ? ('settings.data.erase.erasing' | translate) : ('settings.data.erase.button' | translate) }}
+      </button>
+    </section>
+  }
+
+  @if (statusMessage()) {
+    <section class="rounded-lg border border-primary/30 bg-primary/10 p-4">
+      <p class="break-words text-sm text-foreground">{{ statusMessage() }}</p>
+    </section>
+  }
+
+  @if (errorMessage()) {
+    <section class="rounded-lg border border-destructive/30 bg-destructive/10 p-4">
+      <p class="break-words text-sm text-foreground">{{ errorMessage() }}</p>
+    </section>
   }
 </div>

toju-app/src/app/features/settings/settings-modal/data-settings/data-settings.component.ts

@@ -15,8 +15,16 @@ import {
   lucideUpload
 } from '@ng-icons/lucide';
 
+import { PlatformService } from '../../../../core/platform';
 import { ElectronBridgeService } from '../../../../core/platform/electron/electron-bridge.service';
+import { CapacitorAttachmentFileStore } from '../../../../domains/attachment/infrastructure/services/capacitor-attachment-file-store';
+import { LocalUserDataService } from '../../../../infrastructure/persistence/local-user-data.service';
 import { APP_TRANSLATE_IMPORTS, AppI18nService } from '../../../../core/i18n';
+import {
+  supportsDesktopDataFolderActions,
+  supportsLocalDataManagement,
+  supportsMobileLocalDataErase
+} from '../../domain/logic/data-settings-capability.rules';
 
 type DataAction = 'open' | 'export' | 'import' | 'erase' | 'restart';
 
@@ -42,9 +50,25 @@ type DataAction = 'open' | 'export' | 'import' | 'erase' | 'restart';
 })
 export class DataSettingsComponent {
   private readonly electron = inject(ElectronBridgeService);
+  private readonly platform = inject(PlatformService);
+  private readonly localUserData = inject(LocalUserDataService);
+  private readonly capacitorAttachmentStore = inject(CapacitorAttachmentFileStore);
   private readonly appI18n = inject(AppI18nService);
 
   readonly isElectron = this.electron.isAvailable;
+  readonly isCapacitor = this.platform.isCapacitor;
+  readonly supportsLocalDataManagement = supportsLocalDataManagement({
+    isElectron: this.isElectron,
+    isCapacitor: this.isCapacitor
+  });
+  readonly supportsDesktopDataFolderActions = supportsDesktopDataFolderActions({
+    isElectron: this.isElectron,
+    isCapacitor: this.isCapacitor
+  });
+  readonly supportsMobileLocalDataErase = supportsMobileLocalDataErase({
+    isElectron: this.isElectron,
+    isCapacitor: this.isCapacitor
+  });
   readonly dataPath = signal<string | null>(null);
   readonly busyAction = signal<DataAction | null>(null);
   readonly statusMessage = signal<string | null>(null);
@@ -106,6 +130,14 @@ export class DataSettingsComponent {
     }
 
     await this.runAction('erase', async () => {
+      if (this.supportsMobileLocalDataErase) {
+        const result = await this.localUserData.eraseLocalUserData();
+
+        this.restartRequired.set(result.restartRequired);
+        this.statusMessage.set(this.appI18n.instant('settings.data.messages.erasedMobile'));
+        return;
+      }
+
       const result = await this.electron.requireApi().eraseUserData();
 
       this.restartRequired.set(result.restartRequired);
@@ -121,14 +153,18 @@ export class DataSettingsComponent {
   }
 
   private async loadDataPath(): Promise<void> {
-    if (!this.isElectron) {
+    if (this.supportsDesktopDataFolderActions) {
+      try {
+        this.dataPath.set(await this.electron.requireApi().getAppDataPath());
+      } catch {
+        this.dataPath.set(null);
+      }
+
       return;
     }
 
-    try {
-      this.dataPath.set(await this.electron.requireApi().getAppDataPath());
-    } catch {
-      this.dataPath.set(null);
+    if (this.supportsMobileLocalDataErase) {
+      this.dataPath.set(await this.capacitorAttachmentStore.getAppDataPath());
     }
   }
 

toju-app/src/app/features/settings/settings-modal/settings-modal.component.html

@@ -129,7 +129,21 @@
           }
         </div>
 
-        <div class="mt-auto border-t border-border px-3 py-3">
+        <div class="mt-auto border-t border-border px-3 py-3 space-y-2">
+          @if (currentUser()) {
+            <button
+              type="button"
+              data-testid="settings-logout-button"
+              (click)="logout()"
+              class="flex w-full items-center gap-2.5 rounded-md px-2.5 py-2.5 text-sm text-destructive transition-colors hover:bg-destructive/10"
+            >
+              <ng-icon
+                name="lucideLogOut"
+                class="h-4 w-4"
+              />
+              {{ 'common.logout' | translate }}
+            </button>
+          }
           <button
             type="button"
             (click)="openThirdPartyLicenses()"

toju-app/src/app/features/settings/settings-modal/settings-modal.component.ts

@@ -27,12 +27,14 @@ import {
   lucideTerminal,
   lucideUsers,
   lucideBan,
-  lucideShield
+  lucideShield,
+  lucideLogOut
 } from '@ng-icons/lucide';
 
 import { SettingsModalService, SettingsPage } from '../../../core/services/settings-modal.service';
 import { ViewportService } from '../../../core/platform';
 import { RealtimeSessionFacade } from '../../../core/realtime';
+import { UserLogoutService } from '../../../domains/authentication/application/services/user-logout.service';
 import { selectSavedRooms, selectCurrentRoom } from '../../../store/rooms/rooms.selectors';
 import { selectCurrentUser } from '../../../store/users/users.selectors';
 import { Room, UserRole } from '../../../shared-kernel';
@@ -97,7 +99,8 @@ import { APP_TRANSLATE_IMPORTS, AppI18nService } from '../../../core/i18n';
       lucideTerminal,
       lucideUsers,
       lucideBan,
-      lucideShield
+      lucideShield,
+      lucideLogOut
     })
   ],
   templateUrl: './settings-modal.component.html'
@@ -106,6 +109,7 @@ export class SettingsModalComponent {
   readonly modal = inject(SettingsModalService);
   private store = inject(Store);
   private webrtc = inject(RealtimeSessionFacade);
+  private userLogout = inject(UserLogoutService);
   private theme = inject(ThemeService);
   private themeLibrary = inject(ThemeLibraryService);
   private viewport = inject(ViewportService);
@@ -413,6 +417,11 @@ export class SettingsModalComponent {
     this.showThirdPartyLicenses.set(false);
   }
 
+  logout(): void {
+    this.closeForExternalNavigation();
+    this.userLogout.logout();
+  }
+
   navigate(page: SettingsPage): void {
     this.modal.navigate(page);
 

toju-app/src/app/features/shell/title-bar/title-bar.component.ts

@@ -31,15 +31,13 @@ import {
   selectIsSignalServerReconnecting,
   selectSignalServerCompatibilityError
 } from '../../../store/rooms/rooms.selectors';
-import { MessagesActions } from '../../../store/messages/messages.actions';
 import { RoomsActions } from '../../../store/rooms/rooms.actions';
-import { UsersActions } from '../../../store/users/users.actions';
 import { selectCurrentUser } from '../../../store/users/users.selectors';
 import { ElectronBridgeService } from '../../../core/platform/electron/electron-bridge.service';
 import { RealtimeSessionFacade } from '../../../core/realtime';
 import { ServerDirectoryFacade } from '../../../domains/server-directory';
 import { PlatformService } from '../../../core/platform';
-import { clearStoredCurrentUserId } from '../../../core/storage/current-user-storage';
+import { UserLogoutService } from '../../../domains/authentication/application/services/user-logout.service';
 import { buildLoginReturnQueryParams } from '../../../domains/authentication/domain/logic/auth-navigation.rules';
 import { SettingsModalService } from '../../../core/services/settings-modal.service';
 import { LeaveServerDialogComponent, ModalBackdropComponent } from '../../../shared';
@@ -94,6 +92,7 @@ export class TitleBarComponent {
   private pluginRegistry = inject(PluginRegistryService);
   private pluginRequirements = inject(PluginRequirementStateService);
   private pluginStore = inject(PluginStoreService);
+  private userLogout = inject(UserLogoutService);
 
   private getWindowControlsApi() {
     return this.electronBridge.getApi();
@@ -376,16 +375,7 @@ export class TitleBarComponent {
   /** Log out the current user, disconnect from signaling, and navigate to login. */
   logout() {
     this._showMenu.set(false);
-    // Disconnect from signaling server - this broadcasts "user_left" to all
-    // servers the user was a member of, so other users see them go offline.
-    this.webrtc.disconnect();
-
-    clearStoredCurrentUserId();
-    this.store.dispatch(MessagesActions.clearMessages());
-    this.store.dispatch(RoomsActions.resetRoomsState());
-    this.store.dispatch(UsersActions.resetUsersState());
-
-    this.router.navigate(['/login']);
+    this.userLogout.logout();
   }
 
   private async copyInviteLink(inviteUrl: string): Promise<void> {

toju-app/src/app/infrastructure/persistence/local-user-data.service.spec.ts

@@ -0,0 +1,104 @@
+import '@angular/compiler';
+import { Injector, runInInjectionContext } from '@angular/core';
+import {
+  beforeEach,
+  describe,
+  expect,
+  it,
+  vi
+} from 'vitest';
+
+import { PlatformService } from '../../core/platform';
+import { AuthTokenStoreService } from '../../domains/authentication/application/services/auth-token-store.service';
+import { UserLogoutService } from '../../domains/authentication/application/services/user-logout.service';
+import { DatabaseService } from './database.service';
+import { LocalUserDataService } from './local-user-data.service';
+
+const filesystemMocks = vi.hoisted(() => ({
+  rmdir: vi.fn(() => Promise.resolve())
+}));
+
+vi.mock('../../domains/attachment/infrastructure/services/capacitor-attachment-filesystem.adapter', () => ({
+  loadCapacitorAttachmentFilesystem: vi.fn(async () => ({
+    filesystem: {
+      rmdir: filesystemMocks.rmdir
+    },
+    directory: 'DATA',
+    convertFileSrc: (url: string) => url
+  }))
+}));
+
+describe('LocalUserDataService', () => {
+  let database: { clearAllData: ReturnType<typeof vi.fn> };
+  let authTokenStore: { clearAllTokens: ReturnType<typeof vi.fn> };
+  let userLogout: { logout: ReturnType<typeof vi.fn> };
+  let service: LocalUserDataService;
+
+  beforeEach(() => {
+    const storage = new Map<string, string>();
+
+    vi.stubGlobal('localStorage', {
+      getItem: (key: string) => storage.get(key) ?? null,
+      setItem: (key: string, value: string) => { storage.set(key, value); },
+      removeItem: (key: string) => { storage.delete(key); },
+      clear: () => { storage.clear(); },
+      key: (index: number) => Array.from(storage.keys())[index] ?? null,
+      get length() {
+        return storage.size;
+      }
+    });
+
+    localStorage.setItem('metoyou_currentUserId', 'user-1');
+    localStorage.setItem('metoyou_voice_settings', '{}');
+    localStorage.setItem('metoyou.authTokens', '{"http://localhost:3001":{"token":"abc","expiresAt":9999999999999}}');
+
+    database = { clearAllData: vi.fn(() => Promise.resolve()) };
+    authTokenStore = { clearAllTokens: vi.fn() };
+    userLogout = { logout: vi.fn() };
+    filesystemMocks.rmdir.mockClear();
+
+    const injector = Injector.create({
+      providers: [
+        LocalUserDataService,
+        { provide: PlatformService, useValue: { isCapacitor: true, isElectron: false, isBrowser: false } },
+        { provide: DatabaseService, useValue: database },
+        { provide: AuthTokenStoreService, useValue: authTokenStore },
+        { provide: UserLogoutService, useValue: userLogout }
+      ]
+    });
+
+    service = runInInjectionContext(injector, () => injector.get(LocalUserDataService));
+  });
+
+  it('clears native storage, auth tokens, and logs the user out', async () => {
+    const result = await service.eraseLocalUserData();
+
+    expect(database.clearAllData).toHaveBeenCalledOnce();
+    expect(filesystemMocks.rmdir).toHaveBeenCalledWith({
+      path: 'metoyou',
+      directory: 'DATA',
+      recursive: true
+    });
+
+    expect(authTokenStore.clearAllTokens).toHaveBeenCalledOnce();
+    expect(localStorage.getItem('metoyou_currentUserId')).toBeNull();
+    expect(localStorage.getItem('metoyou_voice_settings')).toBeNull();
+    expect(userLogout.logout).toHaveBeenCalledOnce();
+    expect(result).toEqual({ restartRequired: false });
+  });
+
+  it('rejects erase on non-native shells', async () => {
+    const injector = Injector.create({
+      providers: [
+        LocalUserDataService,
+        { provide: PlatformService, useValue: { isCapacitor: false, isElectron: false, isBrowser: true } },
+        { provide: DatabaseService, useValue: database },
+        { provide: AuthTokenStoreService, useValue: authTokenStore },
+        { provide: UserLogoutService, useValue: userLogout }
+      ]
+    });
+    const browserService = runInInjectionContext(injector, () => injector.get(LocalUserDataService));
+
+    await expect(browserService.eraseLocalUserData()).rejects.toThrow(/native mobile/i);
+  });
+});

toju-app/src/app/infrastructure/persistence/local-user-data.service.ts

@@ -0,0 +1,54 @@
+import { Injectable, inject } from '@angular/core';
+
+import { PlatformService } from '../../core/platform';
+import { clearStoredLocalAppData } from '../../core/storage/current-user-storage';
+import { DatabaseService } from './database.service';
+import { UserLogoutService } from '../../domains/authentication/application/services/user-logout.service';
+import { AuthTokenStoreService } from '../../domains/authentication/application/services/auth-token-store.service';
+import { loadCapacitorAttachmentFilesystem } from '../../domains/attachment/infrastructure/services/capacitor-attachment-filesystem.adapter';
+
+const CAPACITOR_APP_DATA_ROOT = 'metoyou';
+
+export interface EraseLocalUserDataResult {
+  restartRequired: boolean;
+}
+
+@Injectable({ providedIn: 'root' })
+export class LocalUserDataService {
+  private readonly platform = inject(PlatformService);
+  private readonly database = inject(DatabaseService);
+  private readonly userLogout = inject(UserLogoutService);
+  private readonly authTokenStore = inject(AuthTokenStoreService);
+
+  async eraseLocalUserData(): Promise<EraseLocalUserDataResult> {
+    if (!this.platform.isCapacitor) {
+      throw new Error('Local user data erase is only supported on native mobile shells.');
+    }
+
+    await this.database.clearAllData();
+    await this.deleteCapacitorAttachmentTree();
+    this.authTokenStore.clearAllTokens();
+    clearStoredLocalAppData();
+    this.userLogout.logout();
+
+    return { restartRequired: false };
+  }
+
+  private async deleteCapacitorAttachmentTree(): Promise<void> {
+    const filesystem = await loadCapacitorAttachmentFilesystem();
+
+    if (!filesystem) {
+      return;
+    }
+
+    try {
+      await filesystem.filesystem.rmdir({
+        path: CAPACITOR_APP_DATA_ROOT,
+        directory: filesystem.directory,
+        recursive: true
+      });
+    } catch {
+      // Missing directory is fine during erase.
+    }
+  }
+}