CIRL account and data deletion Terms package 2026-09-12

You can ask Connect In Real Life (CIRL) to erase your account. Hiding or “closing” an account in moderation tools is not erasure.

In the app Signed-in: Settings → Delete my account. You will be asked to type DELETE. CIRL records the request, time, and source. This also works while your account is suspended or closed. Legal documents are a separate page (Settings → Legal).

Without the app Open the public page on the CIRL site: **Legal → Delete account** (`/legal/delete-account`) and enter your email. We email you a link (and a code for the `POST /legal/deletion-requests/{id}/confirm` call). Open the link and press Confirm. The link and code expire after 45 minutes and work once; asking again sends a new link and the old one stops working. You can also email **support@cirl.app** with subject “Delete my CIRL account”. You do not need to reinstall CIRL only to make the request.

What happens after you confirm - At once: your profile is hidden from Discover, your business profiles are closed, and activities you host that have not ended are cancelled. Participants are told the activity was cancelled because the organizer left CIRL. - 14 days later: your account is erased. This is always within 30 days of the confirmed request. To cancel, write to support@cirl.app within the 14 days. Activities that were already cancelled stay cancelled. - We send one last email to say the account was erased.

What is removed Your account and profile, photos and other files we host for you, private fields, interests, business profiles, sessions and devices, consents and terms acceptances, match embeddings and cached explanations, Discover disclosure rows, unused boosts, notifications, access logs in the live database (also sign-in attempts and codes that name your email), referral codes, in-app purchase records, bug reports you sent, the messages you sent and the chat photos, voice notes and videos you sent.

Activities you hosted are not deleted, because other people joined them: they are shown as hosted by “Deleted user”, without your profile, cover photo or check-in code. Groups you own pass to the member who joined first. Initiatives you proposed stay for the people who voted and commented on them, shown as proposed by “Deleted user”; your own comments and votes are removed. Other people’s messages and their accounts stay. We do not delete another user because they chatted with you.

What we keep - A keyed hash of your email (not the email itself) on your deletion requests, so a deleted account is never restored from a backup. - If your account was banned or closed by moderation: a keyed hash of your email for as long as the ban lasts (no end for a closed account). Sign-up refuses that email while the hash is active, to stop the same person signing up again. - Initiatives you proposed, shown as proposed by “Deleted user”. - Older access-log archive files (sign-in times, IP address, device type, and sometimes your email). They are not edited one by one; they follow the access-log retention target in the Privacy Notice. - Safety reports you filed about other people, without your profile, and reports other people filed about you, as long as the case needs them. - Referral ledger and payout records, without your account, where they record money CIRL paid or owed. - Other people’s messages. - Anything under a legal hold, for as long as the hold lasts.

Backups Encrypted database backups roll out on their own cycle: daily copies for 7 days, weekly for 4 weeks, monthly for up to about 6 months. A deleted account is never restored from a backup as a live user.

Status After you request, you can ask support@cirl.app for the status (received, needs verification, scheduled, done). Deletion is repeatable (idempotent): a second request reuses the first and never recreates the account.