ACCOUNT & DATA DELETION

App: Handshake (com.handshake.protocol) by Mirdain Group LLC

Option 1: Instant In-App Account Deletion (Recommended)

Open the Handshake mobile app and sign in to your account.
Navigate to Profile → Settings → Delete Account.
Confirm deletion. Your authentication record, private user profile, public profile mirror, notifications, reserved @handle, and unaccepted outgoing proposals are permanently deleted immediately.

Note: To prevent manipulation of active peer commitments, any active or disputed agreement (ACTIVE, DISPUTED, or MEDIATION_PENDING) must be completed, cancelled, or resolved before in-app deletion can proceed. Any incoming PENDING invites sent to you by other users are automatically rejected and their locked Token deposits are refunded.

Option 2: Request Account Deletion via Web / Email

If you have uninstalled the app or cannot access your device, you may request permanent account deletion by emailing our Trust & Safety team from the exact email address registered to your Handshake account:

Request Account Deletion via Email

Email: info@mirdaingroup.com
Verification & Response Time (SLA): To protect your account from unauthorized deletion requests, we verify ownership by sending a one-time confirmation reply to your registered account email address. Email deletion requests are acknowledged within 3 business days and completed within 15 calendar days of verification (well within statutory CCPA/Google Play timelines).

What Data Is Deleted Immediately

Firebase Authentication Record: Your login credentials, email record, and linked OAuth provider identifiers.
Private User Profile (/users/{uid}): Your email address, Token balances, Cred score, referral metadata, AI consent record, FCM push tokens, and blocked user list.
Notifications (/users/{uid}/notifications): Your in-app notification history.
Public Profile Mirror (/public_profiles/{uid}) & Handle (/handles/{handle}): Your public profile document and reserved @handle mapping.
Unaccepted Outgoing Proposals: Any agreements you created that are still in PENDING or PENDING_CLAIM status.

What Data Is Retained & Retention Schedule [DRAFT — PENDING COUNSEL REVIEW]

Because Handshake is a two-party peer accountability ledger, certain non-credential records involving counterparties, financial/token integrity, and platform safety are retained for limited periods after your account is deleted:

Data Category	Why It Is Retained	Retention Period (Draft)
Finalized Agreements (`/agreements/{dealId}` in `COMPLETED`, `CANCELLED`, `REJECTED`, or `RESOLVED_BY_AI` status)	Preserves the counterparty's agreement history and the integrity of completed deal counts and Cred calculations.	Retained for up to 24 months after completion/resolution (or until the counterparty also deletes their account).
Agreement Proof & Dispute Evidence Photos (`/agreements/{dealId}/evidence/*` in Cloud Storage)	Supports dispute auditability and abuse review on finalized agreements.	Retained for up to 90 days following final agreement resolution (or up to 24 months if associated with an abuse/safety report).
Immutable Token & Cred Audit Ledger (`/ledger/{entryId}`)	Contains internal `uid`, `deal_id`, `event_type`, and Token/Cred deltas (no email address or password) to prevent token-minting abuse and preserve audit integrity.	Retained for 24 months from transaction timestamp.
Abuse Reports & Safety Logs (`/reports/{reportId}`) and De-Identified Deletion Audit Log (`/deletion_audit_log`)	Enforces Trust & Safety bans, prevents repeat harassment, and records proof of compliance with deletion requests (using a SHA-256 hash of UID/email rather than plaintext email).	Retained for 12 months (abuse reports) and 24 months (de-identified deletion compliance log).
Application Error Telemetry (`/app_errors/{errorId}`)	Diagnostic crash and error monitoring.	Retained for up to 90 days.