Account deletion and data retention
Operator: Brandsap · Privacy contact: contact@brandsap.com · Effective date: 2026-10-31
1. How to delete your data
| Who | How | What happens |
|---|---|---|
| Guest (no account) | In the app: You → Delete my data | Your reader record and everything linked to it are deleted from our server at once, then the app clears the phone. If our server cannot be reached, nothing is deleted and the app tells you |
| Signed-in reader | In the app: You → Delete account and data | You confirm your sign-in. We delete your Curivra data, then the app deletes your Firebase sign-in account. If the second step fails, the app says so and offers to finish it |
| Signed-in reader, without the app | In a web browser: https://curivra-public.briefly-app.workers.dev/delete/ | You sign in with the same e-mail and password or Google account, type DELETE, and the page performs the same two steps. You do not need the app installed |
| Anyone | E-mail contact@brandsap.com | We confirm the request comes from the account holder (for example by asking you to send the Reader ID shown under You → About, or to write from the account's sign-in address), delete the data and reply within 30 days |
A guest has no e-mail address or password, so a guest's data can be deleted from the app, by sending us the Reader ID shown in the app, or automatically after 210 days without use. Nobody can delete another person's account: the web page deletes only the account you sign in to, and staff delete only after confirming the request.
2. What is deleted
Your reader record and, in the same operation: your profile and privacy settings, the record of the Terms version you accepted, followed and excluded topics, muted sources, saved and hidden stories, story-level reading data (if you turned it on), usage counts, feedback and problem reports you sent, the words and contact details of complaints you made, push-notification tokens and notification settings, and the link to your Firebase sign-in account. Your session stops working immediately.
3. What remains, and for how long
| Item | Why | Linked to you? | How long |
|---|---|---|---|
| Database recovery history | Our database provider keeps point-in-time recovery for disaster recovery | Yes, until it expires | 7 days on our current plan (30 days on a paid plan) |
| Encrypted backups (if enabled) | Disaster recovery | Yes, until they expire | 14 days |
| Deletion record | Lets us repeat your deletion if we ever restore the database from recovery history or a backup | Holds only the random reader ID, the time and the reason (your request or 210 days without use) | 45 days |
| Server request logs | Security and debugging (Cloudflare Workers Logs) | Possibly, through request metadata such as the IP address | 3 days on our current plan, up to 7 days on a paid plan |
| Firebase sign-in records | Google's own processing after the account is deleted | Held by Google | Google states deleted-account data is removed from its live and backup systems within 180 days, and that it keeps logged sign-in IP addresses for a few weeks |
| Problem reports about a story (older format) | The story's report history | No: the link to you is removed | As long as the story's record |
| Anonymous complaint record (reference, ground, dates, decision, action; never your words or contact details) | A record of how complaints were handled | No: the link to you is removed | 12 months after the decision |
| System-wide daily totals | Service health (for example, how many off-interest stories were blocked) | No | Indefinitely |
| Staff audit log entries | Accountability for newsroom decisions | They may contain your random reader ID, not your data | Indefinitely |
4. Data on your phone
Signing out clears topics, saved stories, the offline feed, queued changes and the account from the phone, keeping only display settings and crash-report consent. Delete my data clears everything. Uninstalling the app removes local data but not your server record: delete it in the app first, use the web page, or let a guest record expire after 210 days.
5. Retention schedule
| Data | Retention |
|---|---|
| Reader data (topics, saves, usage counts, opt-in reading data) | Until you delete it |
| Guest records not used for 210 days | Deleted automatically with all linked data |
| Feedback | Deleted 12 months after it is resolved, or with your data |
| Complaints | Deleted 12 months after the decision; your words and contact details are removed earlier if you delete your data |
| Story text stored from a licensed source | Deleted after the licence's retention period |
| Deletion records | 45 days |
| Server request logs | 3 days (current plan); up to 7 days on a paid plan |