Data Retention Policy
This page describes how long MeetCute keeps each category of data. It is part of our Privacy Policy and shares the same contact details.
1. Active account data
| Data type | Retention while account is active |
|---|---|
| Account profile (email, display name, SuperCala id) | For the life of the account |
| Questionnaire responses | For the life of the account |
| Uploaded photos (originals) | 90 days from upload, then deleted — only the biometric embedding is kept long-term |
| Biometric embeddings (photo vectors) | Up to 3 years or until account deletion, whichever is earlier |
| Past meeting records | 2 years after the meeting, then de-identified |
| Payment references (Stripe ids, last 4 of card) | 7 years for tax and regulatory compliance |
| Access logs (IP, user-agent, timestamps) | 90 days, unless flagged for a security investigation |
2. On account deletion
When you delete your account from your dashboard settings we trigger the following workflow within 30 days:
- Your profile is immediately removed from the match pool so no further meetings can be proposed with you.
- Questionnaire responses, photos, and biometric embeddings are deleted within 30 days.
- Account profile is deleted or de-identified (we keep a minimal hashed reference so we can honor subsequent "delete me" requests and prevent re-creation of banned accounts).
- Past meeting records are de-identified: your identity is removed, but the fact a meeting happened (and its outcome / reports, if any) is kept for safety auditing of the other participants.
- Payment records are retained in Stripe for 7 years for tax and regulatory reasons; we delete our internal references sooner where we can.
3. Legal holds
If we receive a legal process (subpoena, court order, preservation letter) that requires us to preserve data, retention above is superseded by that hold for the data subject to it. We will notify affected users where legally permitted.
4. Backups
Encrypted backups may contain your data for up to 35 days after deletion from production systems. Backups are access-restricted and used only for disaster recovery.
5. Requesting a copy or deletion
Email privacy@supercala.ai from the address on your account. We respond within 30 days.