Data Deletion Policy — Tribal Hearts
Google Play, the DPDP Act 2023, and basic respect for our users all require that we honor account-deletion requests. This document is the authoritative description of what happens when you ask us to delete your account or data.
If you simply want to delete your account, you do not need to read this page — open the app, go to Settings → Security → Delete Account, and tap the red button. We do the rest. This page is for people who want to know exactly what we delete, when, and how.
1. Two flavours of "stop using the app"
Pause (Deactivate)
- Triggered from Settings → Security → Pause Account (or by inactivity over a long period).
- Your profile is hidden from discovery, matchmaking, and search.
- Outbound chat messages are paused.
- You can reactivate by signing back in any time within 30 days.
- After 30 days of pause with no reactivation, the account is moved to permanent deletion automatically.
- Refunds: see Refund Policy.
Delete
- Triggered from Settings → Security → Delete Account.
- You confirm twice (once on a dialog, once by typing the word "DELETE").
- A 30-day cooling-off window begins. During this window your account is paused but data still exists; signing back in cancels the deletion.
- After 30 days, your data is permanently deleted as described below.
- This deletion is irreversible.
2. What gets deleted
| Data category | What happens on delete |
|---|---|
| Account row | Deleted from v2_accounts |
| Profiles | Deleted from v2_profiles, including all profile fields |
| Photos, voice notes, video messages | Deleted from Backblaze B2 and from the v2_media_assets table |
| Verification documents | Replaced with a purged/... placeholder; original file deleted from B2 |
| Chat messages | Deleted from v2_conversation_messages; the other party's copy of your historical messages stays unless they also delete |
| Interests, likes, saves | Deleted |
| Reports you filed | Anonymized: your account ID is replaced with deleted_user, but the report content remains for safety record-keeping (see Section 5) |
| Reports filed against you | Anonymized: kept for safety record |
| Push tokens | Removed from v2_push_device_tokens |
| Sessions | All sessions invalidated (you are signed out everywhere) |
| Payment history | Order IDs retained for 8 years to comply with Indian tax / RBI record-keeping rules; personally identifying linkage (account ID) is replaced with a one-way hash |
| Audit logs | Login + security events kept for 365 days then purged |
| Crash logs | Auto-expire after 90 days (Firebase default) |
| Email correspondence with support | Retained for 3 years for legal record then purged |
3. What does NOT get deleted
- Information that we are legally required to retain:
- Payment / GST records (8 years).
- Records subject to a valid government or court order.
- Aggregated, anonymized analytics (e.g. "X profiles deleted last month") — this contains no personal data and is not linked to you.
- The other party's record of conversations you had with them — they control their copy of the chat history, just like email.
4. How we delete
- The mobile app sends
POST /api/v2/account/delete-request. - The backend marks the account
deletion_requested_atand creates a job entry in the deletion queue. - A scheduled task runs daily and processes deletion requests whose cooling-off window has elapsed.
- For each due request:
- All B2 object keys belonging to the user are queued for deletion via the B2 lifecycle API.
- Database rows for the user are deleted in a single transaction.
- A confirmation email is sent to the user's registered email address.
- Total time-to-erasure after the cooling-off window: typically under 24 hours, never more than 7 days.
5. Safety record exception
We retain a record of:
- Reports you filed (anonymized).
- Reports filed against you (with anonymized actor ID).
- Final action taken (warning, suspension, ban) and the date.
This record exists to prevent banned users from re-creating accounts and to honor any future law-enforcement request. It contains the minimum data needed for that purpose and is reviewed for further purge every 5 years.
6. How to request deletion without using the app
If for any reason you cannot access the app:
- Email admin@garibaitservices.com from the email address on your account. We will verify your identity and process the request.
- Mention "Account deletion" in the subject line.
- Include your registered mobile number and any identifying details.
We will acknowledge within 24 hours and complete deletion within 30 days.
7. Data export before deletion
We provide a one-time export of your data on request:
- Profile fields (JSON).
- Chat history (JSON).
- Photos and voice notes (zipped).
- Payment history (CSV).
Write to admin@garibaitservices.com with subject "Data export". We deliver via a secure download link within 30 days.
8. Contact
- Privacy & deletion: admin@garibaitservices.com
- Grievance Officer: admin@garibaitservices.com
9. Public deletion URL (Play Store requirement)
This page is reachable publicly at: https://merming.garibaitservices.com/legal/data-deletion
It is also linked from inside the app at Settings → Help & Support → Delete account.