Data Retention & Deletion

Active accounts

Profile, photos, preferences, swipes, matches, conversations, messages, and other feature data are retained for the lifetime of your account. This allows you to return to your history, matches, and conversations.

Selfie verification images

Live selfie verification images (neutral face and head-turn photos) are retained only as long as needed for review:

• Selfies for a request that has been reviewed (approved or rejected) are deleted 7 days after the review decision.
• Selfies for a request still awaiting review are deleted 14 days after submission, and the request expires.
• Once deleted, selfies are removed from the private verification storage and the verification record no longer references them.

Chat filter & blocked messages

Outgoing messages are screened for phone numbers, email addresses, links, and abusive content. Blocked message excerpts (messages not sent) and flagged message excerpts (delivered but recorded for admin review) are retained for 30 days for safety and moderation purposes, then removed.

Account deletion

When you delete your account (Profile → Settings → Delete Account):

• Your User document is permanently removed.
• Profile photos and selfie verification images are targeted for deletion from MongoDB and backend file storage. Chat images are also targeted for deletion.
• Device push tokens are deleted.
• Profile, partner preferences, swipes, blocks, shortlists, ad rewards, boosts, subscriptions, verifications, and notifications are deleted.
• Matches and conversations are deactivated. Internal participant IDs and conversation preview fields may remain so the other participant retains conversation history.
• Text in messages you sent is replaced with "[Message deleted]"; message records and conversation history may remain for the other participant. Chat-image cleanup is attempted.
• Safety reports are not currently removed by the account-deletion operation and may retain report details and internal account IDs for moderation.
• All existing sessions and refresh tokens are invalidated immediately.
• Active Socket.IO sessions are disconnected.

Re-registration

After deletion, the same email or phone number may be used to create a new account. Old matches and conversations will not be restored.

Request deletion without the app

If you cannot delete your account in the app, use the web account deletion page. Sign in with your account credentials and confirm deletion there.

Backups & logs

Backup and log retention periods depend on the production database, hosting, and logging providers. The application repository does not configure a fixed expiration period. We will publish the applicable retention period after confirming production provider settings.

Legal holds

We may retain safety reports and other records when reasonably necessary to investigate abuse, enforce our policies, protect users, or comply with applicable law. The production retention period and criteria for these records must be defined and applied by the service operator.

Your controls

• Delete your account anytime from Settings.
• Request a copy of your data by contacting crushwed.app@gmail.com.
• Report concerns about data handling through the app or the same support address.