Account Deletion and Data Retention Policy
Version:
You can delete your account yourself from Profile at any time. Deletion is immediate.
What happens when you delete
At once we delete everything that is yours: your profile and photos, your location and who could see it, your friendships and friend requests, your blocks, the events you marked Going, your requests to join parties, your places in crews, the crews you made (they are deleted for everyone in them), the introductions you made or received, the plans you posted or joined, the activities you posted and the ones you said Going to (where another member named you as the leader, your name is taken off), the recommendations you wrote, with their photos, and your Helpful marks, your ratings and tips about drivers, and drivers you suggested that are not listed, your saved places and events, trips, tips, ratings and places you marked as visited, suggestions still waiting for review, your notifications and every notification about you, your settings, sessions, sign-in links and sign-in records, push tokens and usage statistics. Your profile is no longer visible, your friends no longer see you in their lists, and you are signed out everywhere.
What stays, without your name, email or photo: an empty account record (when the account was created and when it was deleted), the entries our audit log already holds about the account, who invited whom, reports you made or that were made about you (see the Moderation Policy), places and events you added that we approved, and the record of which version of our Terms and policies you accepted.
Events you hosted: villa parties still to come are cancelled and your guests are told; your name, the address, the pin and your contact detail are removed from every event you hosted. The events themselves stay, without you.
Deleted data then disappears from backups on the database provider's retention schedule (35 days).
How long we keep things while you are a member
| Data | Kept for |
|---|---|
| Live shared location | Only the latest point, deleted immediately after you stop sharing or leave the island, and within 15 minutes of the end of a timed share; a share until you turn it off keeps it until you stop it, or until 14 days pass without a new position |
| "I'm at" (the place you chose) | Until it ends (at most 3 hours), you stop it, you leave the island, or you delete your account |
| Your WhatsApp number for quick contact | Until you turn the switch off or delete your account |
| Nearby: the time of the last notification for two friends | Until either of you turns nearby off or deletes the account |
| Applications still waiting for review | Deleted after 30 days |
| Declined applications | Deleted 90 days after the decision |
| Reports and moderation records | As long as we need them for safety and repeat problems, then we delete them. The record of warnings and decisions about you is deleted with your account; reports and our audit log stay |
| Server and platform logs | On the hosting provider's own retention schedule (Vercel and the database host) |
| Sign up codes | Until used or 10 minutes, whichever is first |
| Email confirmation and password reset links | Deleted once they expire (24 hours and 1 hour) |
| Sign-ins and failed sign-ins (security records) | 90 days |
| Sessions and the device each one is on | Until you sign out, until 30 days pass without you using KAA on that device (8 hours after sign-in for our team), or until you or an admin sign out everywhere. These are the current periods: our security settings can change them, but a member's session never lasts more than 90 days after its last use, and a team member's never more than 8 hours after sign-in |
| When your password last changed and how | Until you delete your account |
| Invitation links nobody used | Deleted once they expire |
| App opens (usage statistics) | 90 days, then merged into daily totals without names. Your first visit, last visit and number of visits stay until you delete your account |
| Notifications in the app | Until you delete your account; notifications about a member are deleted when that member deletes their account |
| "Who's in?" plans and who joined them | Gone from the app one hour after the plan starts. Deleted 7 days after the plan's time, or at once when the member who posted it deletes it or deletes their account. A reported plan is kept until the report is decided |
| Activities and who said Going | Deleted 7 days after the activity's last time (a weekly one after its twelfth week), or at once when the member who posted it deletes it or deletes their account. One we did not approve is deleted 30 days after the decision. A reported activity is kept until the report is decided. Going is removed when you take it back, and starts again each week for a weekly activity |
| Recommendations and Helpful marks | Kept while you are a member. Deleted at once when you delete the recommendation or your account; a Helpful mark when you take it back. A recommendation we did not approve or removed is not shown to members and stays in our records until you delete it or your account |
| Driver ratings and tips | Kept while you are a member. Deleted when you take them back, when the driver is removed, or with your account |
| Drivers in the directory | A listed driver is kept while listed and removed at once on the driver's request, with the photo, ratings, tips, and the reports and moderation records about them. A suggestion that was declined is deleted after 30 days; one we could not get consent for after 90 days; a driver we hid after 90 days |
| Requests to join a party | Deleted when the host approves (you are then on the guest list), when you take the request back, 30 days after the party, and with your account |
| A crew | Until the member who made it deletes it or deletes their account. A crew our team removed is deleted 30 days later; a crew hidden while we look at a report is not deleted |
| Your place in a crew | Until you leave, are removed, or the crew is deleted. If the crew's maker removed you, we keep that fact while the crew exists, so its link does not let you back in |
| An introduction | 14 days to answer; deleted 30 days after it ended |
| Requests sent through "Your event?" (name, email, request) | 90 days after the request is closed, at most 180 days after it was sent; a member's own requests are deleted with the account |
| Push notification tokens (iOS app) | Until you sign out on that phone, delete your account, or Apple tells us the token no longer works |
A job runs every day and deletes the applications, links and invitations above when their time is up, and merges app opens older than 90 days into daily totals.
What we may keep longer
Data we must keep by law, or need for a legal claim or an open safety investigation, only for as long as that requires.
Write to support@kohvra.com. A person reads every message.