Data deletion policy

This Data Deletion Policy explains how you can remove your data from Confinity (confinity.com) and what happens when you do. We honour deletion requests within 30 days, with no dark patterns and no exit survey you can't skip. You have four paths, each faster than the last:

• Delete a specific item. From within the app, open the entry, memorial, space, or contact and choose "Delete" or "Remove". Most items are removed immediately.
• Delete an entire class of data. From confinity.com/app/settings/privacy, choose "Remove all [entries / memorials / voice notes / attachments]" and type REMOVE to confirm. A receipt is emailed within an hour.
• Delete your whole account. From confinity.com/app/settings/account, choose "Delete my account." This removes your account and all data associated with it within 30 days. You can cancel within the first 7 days.
• Write to us. If you can't sign in, email delete@confinity.com from the address on your account. We verify identity by sending a confirmation link to that email, then honour the request within 30 days.

When you delete your account, we remove:

• Your profile, public profile (if published), and any remembrance pages you authored.
• Your journal entries, voice notes, attachments, and media.
• Your family graph connections (relationships with kin, space memberships).
• Your subscription and billing history kept beyond the legal minimum (typically 7 years for tax purposes; see "What we can't delete" below).
• Your notification and privacy settings.
• Your session, authentication, and access-log records.

Content you contributed to memorials managed by other family members (e.g. a story you added to a relative's remembrance page) is detached from your identity but may remain on the memorial with your first name, because the memorial belongs to the subject and their family, not to you. You can ask the memorial manager to remove contributed content. Some records we are legally required to keep:

• Tax and accounting records for financial transactions (typically 6 years in the UK, 7 years in the US).
• Regulatory records where required (e.g. incident records if a data breach occurred).
• Backups take up to 30 days to age out of our backup retention window. During this window your data is encrypted at rest and not accessible except in the event of a disaster recovery.

| Action | Completion target | |---|---| | Delete an individual item | Immediate | | Delete a data class via the privacy dashboard | Immediate from the live database; within 30 days from backups | | Delete your account | Within 30 days of confirmed request; 7-day grace window during which cancellation is possible | | Honour a written request to delete@confinity.com | Within 30 days of identity verification | Memorial pages occupy a special status. If you are a listed family member of a deceased person whose memorial lives on Confinity, you can request either:

• A dignified tombstone — the URL continues to exist but returns a one-line notice with only the person's name and dates. The URL is retired from search indexing.
• A full takedown — the URL returns a 404 and is removed from our systems within 30 days.

We never delete a memorial on request of someone who is not a listed family member or the original memorial manager, unless ordered by a court. Before you delete, you can export everything you've saved. From confinity.com/app/settings/export, choose "Export everything." A ZIP file containing JSON + media will be emailed to you within 24 hours. When you delete your data, we instruct our sub-processors (listed at confinity.com/trust/centre) to delete any copies they hold. They have their own deletion timelines, typically 30–90 days. If we deny a deletion request because of a legal obligation or because you are not the authorised subject (e.g. disputes over a memorial), we will explain the reason in writing within 14 days. You can appeal by replying to the email, and we commit to a second-level review within 30 days. If you are in the UK or EU, you also have the right to complain to your data protection authority (ICO in the UK; your national DPA in the EU).

• General deletion requests: delete@confinity.com
• Data protection questions: privacy@confinity.com
• Trust & Safety: trust@confinity.com

See also: Privacy Policy · Terms of Use · Trust Centre.