Treaxures
Contact
Legal

Data Deletion and Export

Last updated

Draft — pending legal review. This document has not yet been reviewed by Indian-jurisdiction counsel and is not in effect. Content is subject to change before publication.

Status: Draft — not effective

Last updated: 2026-08-09 Operator: Treaxures, operated by ESPR Creative Lab Private Limited, Aizawl, Mizoram, India

1. How to make a request

In the app, open Profile → Settings:

  • Download My Data produces a JSON export of your account (see §8).
  • Delete Account starts the deletion described below.

If you cannot sign in, write to privacy@treaxures.com, from the account's email address where possible. Assisted requests use proportionate identity verification. Support will never ask for your password, UPI PIN, a full payment credential, or an identity document that is not needed for the check.

The response and completion periods quoted to users must come from the counsel-approved policy for the request type, not from a generic promise. The periods stated in §3 and §4 below are the ones the software enforces today.

2. Confirming a deletion request

Deletion requires re-authentication. If the account has a password, you enter it. If you signed in with Google, Apple, or a magic link, the app emails you a six-digit code that is valid for five minutes and allows five attempts. You can start deletion at most once per hour.

3. What happens immediately

As soon as the request is confirmed, before the grace period starts:

  • your profile is flagged as deleted and stops being visible to other users;
  • your username is released and replaced with a deleted_… placeholder, your display name becomes "Deleted user", and your avatar and bio are cleared;
  • your push/device tokens are deleted, so notifications stop;
  • new sign-ins are blocked for 30 days. An access token that was already issued keeps working until it expires — normally within an hour — but the hidden profile means it can read very little;
  • we email you a confirmation containing a one-time cancellation link.

Your original username, display name, avatar, and bio are held in a private snapshot so that a cancellation can restore them. That snapshot is destroyed with the rest of the profile at the end of the grace period.

4. The 30-day grace period

Deletion is scheduled for 30 days after the request. During that window you can cancel using the link in the confirmation email, which opens treaxures.com/account/cancel-deletion. Cancelling restores the profile from the snapshot, lifts the sign-in block, and is recorded in the deletion audit trail. The link is single-use and stops working once the grace period ends.

Because sign-in is blocked during the grace period, the emailed link is the only self-service way to cancel. If you have lost it, contact privacy@treaxures.com before the scheduled date.

5. What the permanent deletion does

After the grace period a daily job performs the deletion. It processes a bounded batch of accounts per run, so a deletion can complete a short time after the scheduled date rather than exactly on it.

Deleted outright. Records that exist only to serve you are removed from around a hundred tables, including: notification settings and logs, privacy and personalisation preferences, device tokens, saved and bookmarked items, downloads and offline sync state, guide progress, walking sessions, purchased hints and in-quest purchases, collectibles, streaks, badges, wallet and point records, subscriptions, trips and itineraries, bookings, flight and hotel bookings and their impact records, carbon-offset purchases, marketplace purchases, promotion redemptions, follows, blocks, likes, referrals, location-sharing and SOS records, emergency contacts, multiplayer session participation and session messages, asset uploads and processed assets, session records, and the user-linked analytics, error, performance, and experiment rows.

Detached from you. Content that other people can still be reading — reviews, comments, posts, place reviews, place visits, messages, consultations, community validations, reports, and search analytics — keeps its row but loses the link to your account, so it is no longer attributable to you. Any photos attached to your reviews are deleted from storage and the photo lists are emptied.

Unpublished and detached. Work you created for others — guides, guide chains, purchasable items, marketplace listings, events, trip templates, business listings, and an expert profile — is archived, delisted, or deactivated, and the creator link is removed. A released guide is not destroyed, because it can carry sources, media, and credits belonging to other contributors; withdrawal, takedown, credit, and licence questions in that situation follow the applicable contributor agreement and need a scoped review rather than an automatic decision.

Files removed from storage. Avatars, guide media, verification documents, post images, raw uploads, place-review photos, and review photos. If any of that file cleanup fails, the account is not marked deleted; it stays in the pending state and is retried on the next run, so no personal files are left behind without an account record to retry against.

Finally the profile row and then the authentication record are deleted, and we email you a completion notice.

6. Records kept after deletion

Some rows survive because another party, or the law, needs them. Except where noted, the account link is removed from these rows, so they no longer identify you through your account:

  • orders, refund requests, payment failures and payment analytics;
  • store purchase and entitlement records needed to reconcile an Apple or Google charge;
  • creator earnings, payout requests, and business payouts;
  • Heritage Fund contributions and marketplace purchases;
  • transactional email logs;
  • verification requests, documents, and certificates (the stored document files themselves are deleted — see §5);
  • content submissions;
  • administrative audit entries.

One record keeps your account identifier: the audit entry recording that this account was deleted and when. It exists so the deletion itself can be proved, and it is not used for any product purpose.

Encrypted backups and disaster-recovery copies expire on their own schedule and are not searched per user. The exact retention period for every category above, the backup expiry window, and the legal basis for each are a release gate pending counsel and accountant approval — earlier drafts quoted a generic seven-year period and a fixed backup window, and those figures were removed because they were not verified.

7. Where deletion stops, and why

Three things are outside Treaxures' reach entirely. Deleting your account removes our copies and the link to your account, but it cannot remove these, and no request to us can:

  • A minted digital collectible. The mint is written to a public blockchain, which is permanent, worldwide, and not editable by anyone — including us. Its metadata and image are published to IPFS, a public content-addressed network, where a copy can persist after we stop hosting ours. Consider this before you mint; the app says so at the point of minting.
  • A flight or hotel reservation. The airline or hotel holds the booking and the traveller details under its own notice and its own retention rules. Ask them directly.
  • An Apple or Google purchase record. The store is the merchant of record for in-app digital goods and Treaxures Pro. We delete our entitlement copy; the store's record of the transaction is theirs.

8. Impact Passport and estimates

Private Passport records are deleted with the rest of your account unless an approved exception applies. A transaction-linked record may instead need de-identification or a visible reversal while the underlying financial ledger entry is retained. Walking- and travel-emissions figures are estimates tied to a completed journey or booking record; they do not survive as a personal claim once that record is gone.

9. Export

Profile → Settings → Download My Data generates a JSON file covering your account and authentication metadata, profile, progress and completion history, posts, reviews, consultations, bookings, transactions, consent history, and your Passport records. Sensitive fields are redacted, and high-volume analytics sections are limited to recent rows. Private data belonging to other participants, partners, reviewers, or staff is excluded.

The export is generated on request, rate-limited to one per hour, and capped at 50 MB — a larger account needs an assisted export via privacy@treaxures.com. The file is returned to your device and you choose where to send it; Treaxures does not post it to a public link.

10. Contact

Privacy and deletion: privacy@treaxures.com Data-protection contact: dpo@treaxures.com General support: support@treaxures.com

Operator: ESPR Creative Lab Private Limited, Aizawl, Mizoram, India.

11. Required before publication

This page cannot become effective until:

  • the privacy owner has tested deletion, export, legal hold, de-identification, backup expiry, failed-job recovery, and restoration against the production retention matrix — including for an account that has used Creator Studio, a private preview, field capture, a partner workspace, a marketplace listing, a travel booking, a store purchase, and a collectible mint, not only a plain explorer account;
  • the foreign-key blocker recorded in this file's maintainer comment is fixed and re-tested, so a deletion cannot silently strand;
  • counsel has approved the retention periods, statutory exceptions, response periods, and wording;
  • the operator has added the registered-office address and corporate identity number to the operator block above.