Delete your account
You can delete your Yapp account here, without the app. If you still have it, go to Settings > Delete account instead.
How it works
- Enter your username and the age group you’re in on Yapp.
- We write the email for you. Send it to privacy@joinyapp.app from the address you sign in with.
- We reply once we’ve checked that the address belongs to the account, and tell you when the deletion starts.
A Parent Portal account has no username: delete it with your sign-in email.
Can’t use this form? Email privacy@joinyapp.app from the address you sign in with.
What we keep after deletion, and for how long
We keep information only as long as we need it for the reasons in this policy. Then we delete it or make it anonymous.
- Selfie video, ID images and face measurements
- Deleted as soon as the check finishes, and within 10 minutes at most. A selfie you agree to provide for an appeal review: when the review is done, within 30 days at most.
- Age check result record
- While your account exists, then 3 years after it’s deleted, to prove we checked ages and to stop banned people from coming back.
- Under-13 sign-up attempts
- Nothing kept, apart from a count that doesn’t identify anyone.
- Profile, photos, Pins and settings
- Until you delete them or your account. If you deactivate, 60 days (28 days in the UK, once Yapp opens there) to change your mind, then deleted from live systems; backups within 14 more days.
- Messages, voice notes and media in chats
- Until you delete your account (messages you sent are then removed for everyone), unless they are part of a report. A message unsent or deleted for everyone is kept as a safety copy for 1 year.
- Snaps
- View once and one replay: removed from the app once every recipient has opened them, or after 30 days if unopened. 24-hour snaps: after 24 hours. Keep-in-chat snaps: like messages. Opened or expired snaps are kept as safety copies for 1 year.
- Stories
- Removed from the app 24 hours after posting, then kept as a safety copy for 1 year.
- Safety copies
- Safety copies of removed messages and of opened or expired snaps and stories are kept for 1 year (longer if reported, flagged, held for a legal reason or preserved under US child-safety law). Only our safety team can open them, on a report, a safety flag, legal process or a child-safety investigation, and every access is logged. They are deleted with your account, and you can ask us to erase a single item unless one of those reasons applies.
- Video call recordings
- 30 days, unless a recording is part of a report, a safety flag or legal process. Voice calls aren’t recorded.
- Terms acceptances and arbitration opt-outs
- The version of the terms you agreed to, when and how, and any arbitration opt-out (how you sent it and when we received it): for the life of your account. Download my data includes them.
- Device bindings and sign-up limits
- A keyed fingerprint of your app install, removed with the device or your account. After a deletion, keyed fingerprints of the device, identity and network range are kept for 30 days so a new account can’t be created straight away. Keyed IP fingerprints for ban enforcement: up to 1 year.
- Reports, evidence and moderation decisions
- 12 months after the case is closed. If an account is banned, the ban record (account reference, age check reference and device signals) for as long as the ban lasts, up to 5 years. We keep only the references and signals needed to recognize a return, never your profile or messages.
- Child sexual exploitation reports
- After a CyberTipline report, US law requires us to preserve the reported content and related data for 1 year. We keep the report reference for 5 years as our retention policy. Longer if law or law enforcement requires preservation.
- Intimate image removal requests
- The request record for 3 years. Hashes of removed images for as long as we run Yapp, to block re-uploads.
- Purchases and gem history
- 7 years, for tax and accounting law.
- Support messages and complaints
- 2 years after they are closed.
- Account deletion requests from our website
- Unconfirmed requests: 24 hours. Confirmed requests: deleted with the account.
- Deletion-block records
- Coded (keyed hash) device, identity and IP-range records: 30 days after a deletion takes effect, so the same device or identity can’t sign up again straight away.
- Security and system logs
- 90 days, longer if needed to investigate a security incident.
- Parent Portal account
- Until the parent deletes it. Consent records (that verified consent was given, the parent’s typed signature, the method, the time, the terms version and a reference number, never the ID or card used to check it): while consent lasts, then 3 years to prove it was given.
- Contact hashes for blocking
- Not kept. Discarded straight after the check.
We may keep information longer if the law requires it, if it’s needed for a legal claim, or if law enforcement asks us to preserve it.
The full details are in section 8 of the Privacy Policy.