Account Deletion & Data Requests

1. Right to Erasure & Deletion

Aphelion Pvt. Ltd. fully respects your right to control your personal data. This policy details how you can delete your Maleu account, what happens to your data during deactivation, and how to request access or correction under DPDPA 2023.

2. How to Delete Your Account

Account deletion is fully self-service. You do not need to contact our support team. You can delete your account inside the mobile app at this navigation path:

Upon tapping delete:

• Deactivation (Immediate): Your account is deactivated instantly. Your profile, photos, lines, dots, and circle posts disappear from all feeds. You are logged out of all devices.
• Grace Period (0–15 Days): We hold your account in a restorable state for 15 days. If you change your mind, you can cancel deactivation by logging back in.
• Permanent Purge (After 15 Days): Once the 15-day window closes, your account is permanently and irreversibly purged from our database. Data cannot be restored after this point.

3. What is Completely Purged

The permanent purge erases all personal details from our active servers:

• Profile data (display name, username, biography, profile avatar, and cover photo).
• All user posts (Lines, Planes, Dots, Rays, Poses, Wrex fitness cards, and comments).
• Media assets (photos and videos stored in Cloudflare R2 are deleted immediately from active media storage).
• Direct messages and group chats (message text is wiped; a "Message deleted" tombstone UI placeholder may remain to protect conversation layouts).
• Stored credentials and authentication session tokens.

4. What is Retained Under Exception

In accordance with Indian law, data deletion is suspended in the following exceptional cases:

• Law Enforcement Holds: If we receive a valid court summons, warrant, preservation request, or digital police hold, the affected data is locked and retained for the duration of the legal hold.
• CSAM Evidence: All digital markers, access logs, and content confirmed as CSAM are locked and preserved indefinitely for referral to the Cyber Crime Cell.
• Anonymized System Analytics: Aggregated system performance and overall metrics (devoid of usernames or identifiers) are kept to analyze traffic stability.

5. Access and Portability Requests

Under DPDPA 2023, you have the right to request a summary of the personal data we hold about you (Right to Know) or correct inaccurate information.

While automated data export features are planned for future development, you can submit manual request emails to:

Please provide your registered email or username. All valid, verified requests will be addressed by our Intermediary Compliance team within 15 working days. Escalated grievances can be directed to our designated Grievance Officer, **Dharantej Reddy Poduvu**, at the same email address.