“Deleted” means deleted for your content. What outlives it is a backup
window, a safety record that catches late uploads, some expiring AI bookkeeping, one
purchase record with your name taken off it, and the ledgers any business has to keep.
Days, not years, for everything we control. Here is each one.
Backups, up to seven days. Point-in-time recovery can hold deleted database
records for up to seven days, and soft deletion can hold deleted private files for the
same, before both age out on their own.
A deletion safety record, eight days. A file upload that began before you deleted
can still land afterwards. Dogoos keeps a server-only marker, removes any stray file when
it appears, and re-checks for eight days before retiring the marker. A direct file link
obtained earlier may work until that check runs.
Short-lived AI records, thirty days. Operation and recovery-cache records from the
AI pipeline expire by themselves after thirty days.
A Play purchase record, with your name taken off it. The record stays so one
receipt can never be used on somebody else's account, and so a live subscription, refund
or dispute can still be settled, but your account identifier is removed from it during
erasure.
Cost totals and logs, on their own clocks. Aggregated, non-content AI cost totals
are kept for financial reconciliation, and legal, security and provider logs keep the
retention periods they came with. The privacy policy is the
binding version of all of this.
There is no undo. Once the confirmation goes
through there's no “restore my account” on our side, and no support request that
reverses it. If you're deleting because of one specific thing (a read you regret, a photo
you'd rather wasn't there), hide it, or clear reads and photos, and keep the account.