Six Vibes — Data Retention Schedule
Draft — this document is under legal review and may change before launch.
Effective date: [EFFECTIVE DATE] · Controller: [OPERATOR NAME], info@sixvibes.org
General rule: we keep your data while your account exists, and delete it when you delete your account (Profile → Settings → Delete account), except where a longer period is listed below for safety or legal reasons. Backups held by our hosting provider roll off within their backup window.
| # | Data category | Purpose | Retention period | Deletion method |
|---|---|---|---|---|
| 1 | Email address, sign-in records | Account and sign-in | Until account deletion | Deleted with the account (auth record deleted, cascades to all linked data) |
| 2 | Sign-in session token (on your phone) | Staying signed in | Until you sign out or delete the app | Removed from device storage on sign-out |
| 3 | Terms acceptance timestamp | Proof of agreement | Until account deletion | Deleted with the account |
| 4 | Age-verification result (yes/no + time) | 18+ enforcement | Until account deletion | Deleted with the account |
| 5 | Age-verification selfie | Age estimation | Not stored by us. Held by Didit only for the check: [PROVIDER RETENTION] | Never written to our storage; provider deletion per DPA |
| 6 | Display name, bio, vibes | Profile | Until you change it or delete your account | Overwritten on edit; deleted with the account |
| 7 | Gender, interested-in | Mutual matching only | Until you change it or delete your account | Overwritten on edit; deleted with the account |
| 8 | Profile photos (approved) | Profile and map face | Until you delete the photo or your account | Photo removed from storage and database when you delete it. On account deletion: database record and storage file deleted |
| 9 | Photos held or rejected by moderation | Safety | Held: until a human decides. Rejected: deleted at decision | Database record deleted on rejection; storage file deleted within 30 days (proposed) |
| 10 | Moderation flags on photos (e.g. "nudity") | Safety, DSA records | While the photo exists | Deleted with the photo |
| 11 | True location + last-seen time | Now map and nearby matching | Overwritten every ~15 min while the app is open; you stop appearing on the map 24 h after last update. Cleared automatically after 30 days without an update | Overwritten; deleted with the account |
| 12 | Display offset (fixed per account) | Location fuzzing | Until account deletion | Deleted with the account |
| 13 | Plans (place, times, vibes, interested-in) | Later matching | Until cancelled or account deletion. Deleted automatically 30 days after the plan's end | Cancelled plans hidden immediately; deleted with the account |
| 14 | 1:1 messages | Conversations | Until account deletion of either participant. "Delete" in a chat hides a message for you only | Deleted when the sender's account is deleted, or when the conversation is deleted because either participant deleted their account |
| 15 | Group chats, members, group messages | Conversations | Until the group's creator deletes their account (the group is then deleted), or you leave/delete your account | Cascade deletion |
| 16 | Group invites | Inviting into groups | Until account deletion. Pending/declined invites deleted automatically after 90 days | Cascade deletion |
| 17 | Read markers (unread badges) | Unread counts | Until account deletion | Cascade deletion |
| 18 | AI activity suggestions (cached plans) | Avoid repeat AI calls | Reused for 12 h. Deleted automatically after 30 days, or when the chat is deleted | Cascade deletion with the chat |
| 19 | Chat text sent to Anthropic for suggestions | Generate plans | Not stored by us beyond the request; Anthropic retains API inputs/outputs per its commercial terms ([CONFIRM — e.g. up to 30 days, no training]) | Per Anthropic DPA |
| 20 | Blocks | Safety | Until account deletion of either user | Cascade deletion |
| 21 | Reports (reason, linked message, status, decision note, timestamps) | DSA notice-and-action, safety | 2 years after the decision; longer if needed for legal claims or authorities. Kept (with the account link removed) if either person deletes their account | Deleted automatically by a daily job |
| 22 | Suspension status and statement of reasons | DSA, preventing ban evasion | 2 years after termination (proposed) | Manual / scheduled purge (to build) |
| 23 | Appeals correspondence (email) | DSA Art. 20 | 2 years after the decision (proposed) | Delete from mailbox |
| 24 | Push token | Message notifications | Until you sign out / disable notifications / delete account | Overwritten or deleted with the account |
| 25 | Server logs (IP, request metadata, errors) | Security, debugging | Per hosting provider defaults: [SUPABASE LOG RETENTION, e.g. 1–7 days on current plan] | Automatic expiry |
| 26 | Image cache (on your phone) | Faster loading | Until the OS clears it or you delete the app | Device-managed |
| 27 | Privacy/data-rights requests and responses | Accountability | 3 years (proposed) | Delete from mailbox |
| 28 | Payment records (only if an onboarding fee is introduced) | Tax/accounting | 7 years (Dutch fiscal retention obligation) | Per payment provider + accounting records |