Account and data deletion

1. Open Hiruu and sign in.
2. Open Profile, then Settings, then Delete Account.
3. Choose prompt deletion or the optional 7-day recovery period, review the effects and complete the security confirmation.
4. If you own an active business, use the ownership-transfer or business-closure flow. If that is not possible, contact [email protected] so your erasure request can be assessed without requiring the app.

Email [email protected] from the account email where possible, with the subject “Delete my Hiruu account”. Include the account email or phone number, your name if present on the account, and whether you use Android or iOS. Do not send a password, identity document or unrelated sensitive data unless Hiruu gives a secure, necessary verification method.

• Email a deletion request

Choose Start deletion now, or choose an optional 7-day recovery period. During recovery you can cancel or start deletion early after confirming your identity. Once permanent deletion is requested to start, it cannot be cancelled. Older pending requests keep the cancellation deadline already shown; they do not receive another waiting period.

• The account enters pending-deletion state and is hidden from account discovery and ordinary shared profile views. Necessary business records may remain with the authorised business.
• Newsletter and optional marketing subscriptions are unsubscribed independently of transactional deletion notices. Push delivery stops and ordinary account use is blocked.
• When permanent erasure starts, active sessions and refresh tokens are revoked. Sign in with Apple authorization is revoked through the provider where a usable credential is held; a missing credential is escalated for resolution.
• Generated CVs, profile media, chat attachments and other user-controlled files are queued for deletion with the relevant provider.
• Authored chat and support message text, mentions, pins and attachments are erased; read receipts, call participation and call-quality or recording references are cleared.
• We confirm completion only after both Hiruu's erasure and required provider tasks have completed. Retained records and protected backup expiry are explained separately.

We begin erasure without undue delay after your chosen start time and aim to complete active-system and processor work within 28 days of the original request, including any recovery period. This is a service target, not permission to delay deletion. We respond to rights requests without undue delay and normally within one calendar month. If a lawful extension is necessary because of complexity or the number of requests, we explain the reason within that first month. A failed processor task does not automatically extend the legal deadline or count as completion.

When an email address is available, a separate encrypted copy is used only for deletion-status notices, including completion or a delay. It is removed after the final notice, or at most 45 days after the original request. A read-only status receipt also lasts up to 45 days. If an older request has already erased its contact address, we do not restore that address just to send a notice; contact [email protected] for assistance.

Account deletion does not resign from a job, terminate a contract, cancel agreed shifts or erase an employer's independently necessary records. Account links and access are removed. Necessary workforce records remain available to the authorised business while required for the employment relationship, then follow the applicable retention schedule. Payment and signed-contract records normally have a 10-year retention limit. This is not a claim that every record must legally be kept for 10 years.

We retain only data needed for a documented legal obligation, legal claim or other continuing lawful purpose, with restricted access and a defined expiry. Business ownership alone is not an exemption from erasure. The Privacy Policy lists the category schedules; you may ask which records remain, the reason, responsible controller and expected expiry. Account deletion and erasure of independently controlled employer records are separate requests, and we assist with the latter where applicable.

• Privacy Policy and retention periods

Protected backups remain encrypted and access-restricted and expire through a rolling rotation of no more than 35 days. They are not used to restore a deleted product feature. The removed Wellbeing feature and its data cannot be re-enabled from backup. If disaster recovery restores an older technical snapshot, deletion tombstones, account restrictions and the Wellbeing purge migration are replayed before normal access resumes.

• Privacy and deletion: [email protected]
• Account and billing support: [email protected]