Skip to main content
For families who want their stories to last. learn about the founding circle.

Legal

Data deletion policy

Binding policy. Plain language where we can. No surprises buried in footnotes.Last updated: 2026-04-23

We publish changes here before they take effect.

This Data Deletion Policy explains how you can remove your data from Confinity (confinity.com) and what happens when you do. We honour deletion requests within 30 days, with no dark patterns and no exit survey you can't skip.

How to delete your data

You have three paths.
  • Delete a specific item. From within the app, open the entry, memorial, space, or contact and choose "Delete" or "Remove". Most items are removed immediately.
  • Delete your whole account. From confinity.com/app/settings/privacy, choose "Delete my account" and type your account email address to confirm. This removes your account and everything we hold in it after a 7-day grace window, during which you can cancel from the same screen.
  • Write to us. If you can't sign in, email delete@confinity.com from the address on your account. We verify identity by sending a confirmation link to that email, then honour the request within 30 days.

What we delete

When you delete your account, we remove:
  • Your profile, public profile (if published), and any remembrance pages you authored.
  • Your journal entries, voice notes, attachments, and media.
  • Your family graph connections (relationships with kin, space memberships).
  • Your subscription and billing history kept beyond the legal minimum (typically 7 years for tax purposes; see "What we can't delete" below).
  • Your notification and privacy settings.
  • Your session, authentication, and access-log records.
Content you contributed to memorials managed by other family members (e.g. a story you added to a relative's remembrance page) is detached from your identity but may remain on the memorial with your first name. A memorial belongs to the person it commemorates and to the family who keep it. You can ask the memorial manager to remove anything you contributed. Two things run the other way, and you should know both before you delete. Deleting your account hard-deletes every memorial page you own, and every tribute other people wrote on those pages goes with it; those words do not come back. And your archive is also held in the browser storage of each device you have used it on, which account deletion cannot reach. Clearing that copy is a separate button on the same privacy page, and it is your decision to press it.

What we can't delete

Some records we are legally required to keep:
  • Tax and accounting records for financial transactions (typically 6 years in the UK, 7 years in the US).
  • Regulatory records where required (e.g. incident records if a data breach occurred).
  • Backups. Copies can persist in our hosting platform’s backups after a delete, and they age out on that platform’s retention setting. We are re-confirming that figure and the encryption applied to it before we publish either here, because the previous version of this line stated both from memory rather than from the configuration. Those copies are not reachable from the product; they exist only for disaster recovery.

Timing

| Action | Completion target | |---|---| | Delete an individual item | Immediate | | Delete a data class via the privacy dashboard | Immediate from the live database; within 30 days from backups | | Delete your account | Within 30 days of confirmed request; 7-day grace window during which cancellation is possible | | Honour a written request to delete@confinity.com | Within 30 days of identity verification |

Memorial pages of people who have died

Memorial pages occupy a special status. If you are a listed family member of a deceased person whose memorial lives on Confinity, you can request either:
  • A dignified tombstone. The URL continues to exist but returns a one-line notice carrying only the person's name and dates. The URL is retired from search indexing.
  • A full takedown. The URL stops resolving and the page is removed from our systems within 30 days.
We never delete a memorial on request of someone who is not a listed family member or the original memorial manager, unless ordered by a court.

Export before you delete

Before you delete, you can export everything you've saved. Request it from confinity.com/app/settings/export, and we email a signed download link to the address on your account once the export has been built. The link expires seven days after it is issued. Nothing downloads in the browser at the moment you ask, which is deliberate: an export is a complete copy of your archive, and it should only ever land in the inbox that owns the account.

Data we share with sub-processors

When you delete your data, we instruct our sub-processors (listed at confinity.com/trust/centre) to delete any copies they hold. They have their own deletion timelines, typically 30–90 days.

Disputes and appeals

If we deny a deletion request because of a legal obligation or because you are not the authorised subject (e.g. disputes over a memorial), we will explain the reason in writing within 14 days. You can appeal by replying to the email, and we commit to a second-level review within 30 days. If you are in the UK or EU, you also have the right to complain to your data protection authority (ICO in the UK; your national DPA in the EU).

Contact

  • General deletion requests: delete@confinity.com
  • Data protection questions: privacy@confinity.com
  • Trust & Safety: trust@confinity.com
See also: Privacy Policy · Terms of Use · Trust Centre.