PooDuo Account & Data Deletion

You can delete your PooDuo account and the data linked to it inside the app. If you have already removed the app from your phone, you can delete it on this page instead.

3. Data deleted right away

• Your user and identity records: your username, avatar, country and settings; the record that links your account to the irreversible digest derived from your Google identity; your registered devices, plus the sign-in refresh and push notification keys.
• Your live room and statistics data: your active or recently ended session records, your one-to-one chat records, your own person record (overlap counts, daily counters, waiting time), your streak and monthly/yearly recap data if you turned them on, and your Wall author counters.
• Your traces in other people's records: your user ID and your phone-specific digest value are removed from other users' overlap and one-to-one pause records.
• Your social links and Wall posts: all your Duo links, your invite codes, the blocks you set and the phone digests tied to them, and your pending or live Bathroom Wall posts that were not reported are deleted.

4. Data that stays for a while after deletion

When a clean account is deleted, no identity data remains. Only the following exceptions stay until their own retention period ends, for safety, abuse prevention and legal obligations:

1. The 25-hour message record and its header: Message text in the live database and the record header (session start and end, IP, connection time, device, version, name cards, the digest derived from your Google identity, the encrypted Google ID number) are left to the normal 25-hour automatic purge. If a report about your deleted account arrives within those 25 hours, the server copies the digest and the encrypted ID number from the header into the report and writes the 30-day deletion record. If the same identity has a live new account at that moment, the report is attached to that account.
2. The 90-day username hold: Your released username is held for 90 days so nobody can take it and impersonate you. After that it becomes free.
3. The infrastructure provider's recovery history: At Cloudflare, room data has up to 30 days and the database has up to 7 days of recovery history. It is not used normally and deletes itself when the time is up.
4. The encrypted traffic record if you posted on the Wall, and rejected Wall posts: If you posted on the Bathroom Wall, an encrypted traffic record is kept for 1 year under Turkish Law No. 5651. It is kept per Wall post only (encrypted author, encrypted IP and time). The text of a rejected Wall post is kept encrypted and visible only to the moderator for 7 days. No traffic record is kept for normal sessions.
5. The device digest in the record of the person who blocked you: If another user blocked you, the phone-specific digest value stays in the blocker's record so you cannot get around the block with a new account on the same phone. Its link to your account is removed. It stays until the block is lifted, the blocker deletes their account, or 18 months of inactivity.
6. The network prefix in report records: The network prefix (the first part of an IP address) in a report record is kept for the same time as the report copy: 90 days after closing, 12 months if action was taken, or as long as a legal hold lasts.

Accounts with a report, warning, restriction, ban or open appeal

• Open appeal: If your account has an open appeal under review, deletion waits until the appeal is decided.
• 30-day deletion record: If an account has an open report, a warning, a Wall rejection or an active restriction at the time of deletion, a deletion record is kept for 30 days using the digest derived from the Google identity. If the same identity signs up again, the restriction carries over to the new account.
• Report copies and legal hold: In closed reports that are not under legal hold, the link to the reporter and to the reported person is anonymised. Open reports and records under legal hold are not anonymised when an account is deleted. A report copy is kept for 90 days after closing, 12 months if action was taken, and for as long as a legal hold lasts (re-confirmed every 12 months).
• Moderation and ban records: Records of moderation actions, and the identity and device digest records of accounts that were banned or confirmed to be under 18, are kept for 24 months.

5. Retention summary