CIRL account and data deletion Terms package 2026-09-12

You can ask Connect In Real Life (CIRL) to erase your account. Hiding or “closing” an account in moderation tools is not erasure.

In the app Signed-in: Settings → Delete my account. You will be asked to type DELETE. CIRL records the request, time, and source. Legal documents are a separate page (Settings → Legal).

Without the app Open the public page on the CIRL site: **Legal → Delete account** (`/legal/delete-account`). Email **support@cirl.app** with subject “Delete my CIRL account”, or use `POST /legal/deletion-requests` with JSON `{"email":"you@example.com"}` (a confirmation code is emailed when mail is configured). You do not need to reinstall CIRL only to make the request.

What we aim to remove Profile, photos we host, private fields, interests, match embeddings and cached explanations we store, Discover disclosure rows, unused boosts, sessions, and your side of conversations where the law allows. Activities you **organized** are cancelled or detached so they do not keep your profile as a live host. Other people’s messages and their accounts stay. We do not delete another user because they chatted with you.

What we may keep for a limited time - A minimal record that the email/handle was deleted, so we do not restore it from backup. - Safety reports, bans, or a legal hold, if there is an active reason, for as long as that reason lasts. - Financial records if paid billing ever launches and tax law requires them.

Timing We aim to finish ordinary erasure in the live database within **30 days** of a verified request. Backup copies roll out on a longer cycle (target about 90 days). These numbers are operational targets until retention jobs are enabled for real data. This review task does **not** run deletion against real users.

Status After you request, you can ask support@cirl.app for the status (received, needs verification, in progress, done). Jobs are written to be repeatable (idempotent) so a second request does not recreate the account.