Data Retention and Deletion

Delete your account

In the app: Profile → Delete account → read the consequences → confirm. Deletion is different from signing out, hiding a profile or uninstalling the app.
Web instructions: account deletion instructions on this site. They must be available without the app installed. Sign-in and confirmation of intent are required to protect against deletion by another person; if you no longer have email access, support can carry out a proportionate ownership check.

What happens after a request

The server records the request, hides the profile, stops its ordinary use and revokes sessions. The server cleans up authentication data, profile data, files, messages, personal game data and AI memory, verifies the result and retries on failure. If media download links were issued, completion waits until they expire (up to two hours plus a technical buffer), then checks the files again. Until cleanup finishes, the status is “Deletion in progress”; the app must not report complete deletion early. Conversations/related materials may also become unavailable to the other participant. Account recovery is not available after completion.
Account deletion does not cancel a store subscription or delete copies previously made by other users, who may have their own legal obligations. If an error occurs, the request is not lost; support can check it using the request number provided.

Ordinary retention periods

Profiles, conversations and files are needed while you use the relevant features or until you delete them. Data already delivered to participants may remain in their copies. Short-lived links have their own expiry period; ending a session does not itself instantly revoke a previously issued link.
The aim is to complete ordinary active cleanup without undue delay. Before release, the operator must confirm maximum infrastructure log and backup retention periods with providers; instant deletion from backups cannot be promised. A backup restoration must reapply completed deletion requests before user access is reopened.

Justified exceptions

Report evidence that has already been captured is separated from ordinary chat and does not become public after deletion. Under the current moderation rules, the baseline period is 365 days from report submission; if the case is not closed, an appeal is open or the 180-day appeal window after the decision is still running, cleanup is deferred until all conditions are met. These periods were confirmed by the owner on 24 October 2026; automatic cleanup remains disabled and requires separate verification and authorisation before activation. A legal hold requires an individual documented basis, periodic review and deletion once the basis ends. It does not justify keeping the entire account indefinitely.
Minimal anonymised/pseudonymised information about abuse prevention, the fact of deletion and limits already used may be retained only to a justified extent; deletion does not replenish the overall AI budget. An anonymised completed-request number and completion time are kept for up to 30 days to confirm fulfilment; deleted file paths are cleared on completion. Cumulative cost/usage counters and unlinked technical identifiers remain while the relevant limits apply; their necessity is reviewed when those features end. Financial records are retained only if they actually exist and the law requires retention. Data being deleted is not used for new dating recommendations, personalisation or AI responses.

Withdraw consent

You can withdraw consent in Privacy and AI. New transfers of the relevant data stop after the server confirms the withdrawal. A completed transfer cannot be undone; erasure requests to processors are handled under applicable agreements and lawful exceptions. Withdrawal does not affect the lawfulness of earlier processing. It does not automatically delete the account; that is a separate action.