Data Retention & Deletion

1. Introduction

This Data Retention and Deletion Policy details how long Aphelion Pvt. Ltd. retains your personal data, content uploads, message history, and server logs. We design our platform around data minimization principles, keeping your data only for as long as necessary to provide our services, maintain security, or fulfill legal obligations.

2. Account Lifecycle and Deletion

The retention timeline for account data is structured as follows:

• Active Accounts: All profile fields, credentials, and content are stored securely while your account remains active.
• Self-Initiated Deletion: Deleting your account deactivates it immediately, hiding it from all other users. We enforce a 15-day grace period, during which you can restore your account by simply logging back in. After 15 days, your data, credentials, and content are permanently and irreversibly purged from our active databases.
• Banned Accounts: If your account is deactivated/banned for violating our guidelines, we preserve account data for a 30-day appeal window. Once this window closes, all data is permanently purged, unless subject to a law enforcement hold.
• Law Enforcement Holds: Data subject to a valid court summons, warrant, preservation request, or child safety investigation is retained indefinitely for as long as legally required, overriding any user deletion request.

3. User-Created Content and Media Files

Timelines for posts, comments, media, and tracks:

• Post Deletion: If you delete an individual post (Lines, Planes, Dots, Poses, Wrex workout), it is permanently and immediately deleted from all platform feeds and databases.
• Media Files: When a post containing media is deleted, the corresponding photos or video objects stored in Cloudflare R2 are immediately and permanently destroyed. We do not maintain offsite recycling bins for deleted user media.
• Comments: Comments are permanently deleted immediately upon your deletion request.
• Bloom Mode (Rays): Deleting an educational Ray immediately removes it from tag listings, search indexes, and active sessions.

4. Messages and Chat Histories

• Individual Message Deletion: Deleting a sent direct message deletes its text content immediately. The conversation list will display a "Message deleted" tombstone UI placeholder, which retains none of the original text.
• Account Deletion: When an account is permanently deleted, all message content sent by you is purged. Conversation placeholders in other users' chat lists may remain to maintain the layout integrity of their history.
• Hidden or Locked Chats: Chat locks (biometrics) or hidden flags are client-level display flags and are stored on our servers only as preferences. They are permanently wiped when your account is deleted.

5. System Logs and Backups

To ensure system integrity, audit safety, and crash diagnostic capability, we retain structural log files under the following strict retention schedules:

• Supabase Automated Backups: Database snapshots and system transaction logs are preserved securely for 30 days.
• Cloudflare Media & CDN Logs: Object storage transactions, security gateway events, and media transfer logs are purged after 7 days.
• Internal Crash & Diagnostic Logs: Technical error traces, app crash stack traces, and database connection failures logged through our custom monitoring system are kept for 30 days.

6. Contact Information

For manual data export requests, access questions, or data correction requests under the DPDPA 2023, please contact our designated Grievance Officer, **Dharantej Reddy Poduvu**, at fuy.aphelion@gmail.com. Manual export requests are processed within 15 working days.