Account Deletion

You can delete your „to you." account at any time, in one of two ways: directly from the app, or — if you no longer have the app installed or can no longer sign in — by sending us a request by email. This page explains both routes and, just as importantly, what gets deleted and what stays behind.

Account deletion is permanent and cannot be undone.

1. Deleting from the app

This is the recommended route, because it runs immediately and you do not have to wait for anyone.

The app interface is currently in Romanian only, so the labels below are given exactly as they appear on your phone, with the English meaning in brackets.

• Open the „to you." app and sign in.
• Tap the last icon in the bottom bar — the bar has no text under the icons, and the last one opens your account screen.
• Tap Setări (Settings).
• Scroll to the Ștergerea contului (Account deletion) section and tap Șterge contul (Delete account). The section expands.
• Read what is deleted and what is kept, then tick the box confirming you understand that deletion is permanent.
• Tap Șterge contul definitiv (Delete account permanently), then confirm once more in the dialog that appears by tapping Șterge contul (Delete account). The other button, Renunț (Cancel), changes nothing.

The account is deleted right away and the app signs you out. There is no „done" screen: the account no longer exists, so there is nobody left to read the message.

2. Deleting by email, without the app

If you have uninstalled the app, changed your phone, or can no longer sign in, write to us at toyouhq@gmail.com with the subject „Account deletion request".

To be able to act on the request, we need two things:

• The email address of the account you want deleted, written in the message. Without it we have no way to find the account.
• Send the message from that same address. This is how we normally verify that you are the account holder — otherwise anyone could request the deletion of someone else's account.

If you no longer have access to the account's address, write to us anyway from another address and say so: we will ask you for other details confirming the account is yours before we delete anything. We will never ask for your password, and we do not ask for photos of your ID in order to process a deletion.

How long it takes

We reply to your request and delete the account within one month at most of receiving it — the period set by Article 12(3) of Regulation (EU) 2016/679 (GDPR), which also allows an extension in complex cases; we do not count on it. In practice it is usually faster, but we do not promise 24 hours: email requests are verified and carried out by a person, and a deadline we cannot keep would just be a polite lie. If you have the app installed and can sign in, the deletion described in section 1 is instant.

3. What gets deleted

Whichever route you choose, exactly the same thing is deleted. For any account:

• Your email address (the field is emptied) and your display name (it becomes „Cont șters" — „Deleted account").
• Your sign-in account with our identity provider (Firebase Authentication). You can no longer sign in with it, not even from a device where you were already signed in.
• Your saved addresses, together with their exact coordinates.
• The likes you gave to other people's posts.
• Your notifications and the push notification tokens of the devices you were signed in on, which identify a specific phone.
• Blocks — both the ones you made and the ones other users made against your account.
• Reports you submitted, whether about posts or about other accounts.
• Your consent for personalised emails is automatically withdrawn, even if you had given it.

In addition, if you had a professional account

• The public profile data: display name, description, phone number, profile picture, city and coordinates.
• All your posts, together with their photos and the likes they received.
• The photos in our storage: both the public portfolio and avatar, and the private diploma documents.
• The data taken from your ID document during identity verification (full name, document series and expiry, verification session identifier). These are deleted from our system. The verification itself is carried out by a separate provider (Didit), which keeps its own record of the session under its own retention policy — that one is not ours to delete.
• The rejection reasons written by our team about you or about your documents.

4. What is kept, for how long, and why

Your account row is not physically removed from the database: it stays, but emptied of everything that identifies you — no name, no email address, no link to the sign-in account. The reason is that certain records are not ours alone, and must not disappear because someone pressed a button. Article 17 of the GDPR requires the erasure of personal data, not the destruction of accounting records.

What remains, anonymised:

• Payment records, if you had a professional subscription: the plan, the amount, the period, the transaction identifiers at our payment processor, and the service categories they refer to, so the rows remain intelligible. This is the basis for accounting reconciliation and for any refunds or disputes. We keep them for as long as Romanian accounting and tax law requires. On our side they no longer carry your name or your email address, but they stay attached to the account's anonymised row, and the transaction identifiers still point into our payment processor's own records, which it keeps under its own policy.
• The record that a diploma was reviewed: that a document was checked on a given date and with what outcome. The document itself, its storage path and its digital fingerprint are deleted — only the verdict remains, which identifies nobody. It is the record that the check we publicly promise actually took place; we keep it by our own decision, not because any particular provision of law requires us to.
• Reports other users filed about your account. These are kept deliberately: if they were deleted, „Delete account" would become the button anyone uses to wipe the complaints made against them. What remains identifies nobody, because it points at the already anonymised row.
• The moderation record, if the „to you." team ever took a measure concerning your account (a warning, a restriction, the removal of a post): what was done, when, by whom and for what reason — together with the restriction reason, which stays on the profile. It is kept for the same reason as the reports: otherwise deleting the account would also erase the history of the measures taken.
• An anonymous row holding the account role and its creation date, so that historical statistics stay correct.

5. What does NOT happen

We do not block your email address. After deletion you can create a new account with the same address at any time; it will be a new, empty account, with no link to the deleted one and nothing recovered from it.

Address blocking does exist in our system, but it applies only when an account is closed by the „to you." team as a moderation measure — never for a deletion you requested yourself. In that case you receive an email telling you what happened and how to appeal the decision.

6. Deletion is permanent

There is no „trash bin" and there is no undo button. After deletion we cannot rebuild the account, bring back your posts, or recover your photos — the personal data is gone. What remains no longer carries your name or your email address, but it stays attached to the account's anonymised row: the moderation record, if there was one, is kept in full, together with the reason written by an administrator. If there are posts or photos you care about, save them to your phone first.

7. Questions

For anything unclear about deleting your account or about your data, write to us at toyouhq@gmail.com.