Account and Data Deletion

⚠️ DRAFT. Must be reviewed by a lawyer before publication. This is prepared text, not legal advice.

🔴 The table in §3 ("what is deleted, what is anonymised, what remains") is a proposal requiring the owner's decision before it is implemented in code.

Version: 2026-08-22 · Effective: to be confirmed

Part of the Terms of Service.

1. In short

You can delete your account in the app, in two or three taps: Settings → Account → Delete account.

You do not need to write to us, call, or explain why. This is not a suspension or a "freeze" — the account is deleted.

Full deletion across all systems takes up to 30 days; we will email you when it is done.

2. Three things before you delete

2.1 🔴 An Apple store subscription does not cancel itself

If you bought a subscription through the app, cancel it separately in your Apple ID settings. We cannot do it for you: store subscriptions are managed only by Apple.

How: device Settings → your name → "Subscriptions" → select → "Cancel Subscription".

2.2 Take what you want to keep

You can request an export of your data before deleting — in the app or by email to to be confirmed. After deletion there is nothing to restore.

2.3 Your key recovery phrase

After deletion nobody can restore your encrypted history, including us. The key backup is deleted together with the account.

3. What happens to your data

3.1 Deleted

profile: name, email address, avatar;
your sign-in account and all device sessions;
your Matrix account (deactivated) and membership of all rooms;
the backup of your encryption keys;
your learning progress and playback positions;
your join requests and access codes;
the users you blocked;
your class recordings and consents, except the decision log (see §3.3);
your customer record at the payment provider and saved payment methods.

3.2 Anonymised

Some records cannot be deleted without destroying other people's data. Everything pointing to you is removed and only the fact remains:

What	What it becomes
Your decisions as school staff (restrictions, removals)	"action taken by a deleted user"; date and grounds are kept
Your reports that have already been decided	an anonymised record of the fact and the decision
A school's activity statistics	an aggregate without your row

Why: a person affected by your decision keeps the right to appeal it, and an appeal is impossible without a record of the decision.

3.3 Retained — and why

What	Period	Basis
Payment records: amounts, dates, receipts	7 years	§ 132 BAO — Austrian tax law; account deletion does not override it (GDPR Art. 17(3)(b))
Log of consent decisions for class recording	per `recording-retention.md`	GDPR Art. 17(3)(e) — establishment and defence of legal claims
Record of accepting the terms: which revision and when	3 years	GDPR Art. 17(3)(e) — without it there is no way to prove on what terms the service was provided
Moderation decisions in cases involving you	3 years	appeals and accountability
Data in an open report or dispute	until the case closes	otherwise there is nothing left to examine
Technical logs	up to 14 days	deleted automatically

This is not "we decided to keep it just in case" — every row has a legal basis, and none of it is used to reconstruct your account or to contact you.

3.4 🔴 Your messages on other people's devices

This calls for honesty rather than hedging.

A message you sent to a room is already on other participants' devices. We delete the server copy and broadcast a deletion request, but:

a device that is offline right now will receive the request later;
a participant who took a screenshot or a copy is outside our control;
a "message deleted" trace remains in the room.

We do remove your name from rooms: after deactivation an anonymised identifier is shown instead.

If you need particular messages gone, delete them before deleting your account, while you still have access.

4. If you are a teacher

Deleting your personal account does not delete your school automatically — otherwise the courses students paid for would vanish.

The order for a school:

Give students 30 days' notice (Teacher Agreement, §11).
Refund unused periods or leave access open until the paid period ends.
Request deletion of the school: to be confirmed.
Once obligations to students are settled, delete your personal account.

A school's payment records are kept for 7 years regardless of deletion.

5. Timing and confirmation

Stage	Period
Account closed, sign-in impossible	immediately
Grace period in case of accidental deletion	7 days
Deletion in the domain database and Matrix	up to 7 days
Deletion at the payment provider and in backups	up to 30 days
Confirmation email	on completion

Backups are overwritten on their own cycle — data may remain in them for up to 30 days. It is not used from backups for anything other than disaster recovery.

6. Your other rights

Deletion is not the only option. You may also:

get a copy of your data (GDPR Art. 15) and an export in machine-readable form (Art. 20);
correct what is inaccurate (Art. 16);
restrict processing instead of deleting (Art. 18) — if you need the data for a dispute;
leave a school without deleting your account;
withdraw consent to class recording without touching anything else.

All of these by email to to be confirmed; we answer within one month.

7. If something went wrong

Deletion did not complete, no email arrived, data is still visible — write to to be confirmed. If our answer does not satisfy you, complain to the Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb.gv.at, or to the supervisory authority where you live.

8. Contact

to be confirmed · to be confirmed · to be confirmed, to be confirmed, Austria

The source version is Russian: 08-account-deletion.ru.md.

“To be confirmed” in place of a detail means exactly that: the value has not been filled in yet. We do not put invented data here.