Delete Your Data

Local Data and Server Records

Hongi keeps personal contacts and their verification secrets on your device. Online features also use server records, including notification registrations, organisation pairings and security logs. Deleting local data does not automatically erase all of these records.

Delete Personal Contacts from the App

1. Open Hongi and go to Settings.
2. Scroll to Danger Zone.
3. Tap Delete All Data and confirm.

This removes personal-contact records and their stored verification secrets, clears your display name, signs out any work accounts on the device, and returns you to onboarding. It does not reset every preference or delete organisation records, work accounts or server audit history.

The app attempts to unregister the contacts' notification mailboxes before deleting their local records. If a network request fails, local deletion can still succeed while a server registration remains. For server deletion requests, contact us as described below.

You can also delete an individual personal contact from its contact screen. This removes your copy of the contact and its secret; the other person's copy is unaffected.

Work Accounts

If you signed in as staff of an organisation, go to Settings → Work accounts, open the account and tap Sign out. This removes the account and its sign-in tokens from your device. Sign out of all work accounts in the same section, and Delete All Data, sign out every work account on the device.

Signing out does not delete the work account itself. When your organisation removes you, your membership and role end, but your sign-in login (email address and credentials) stays on our sign-in service until you ask us to delete it, as described below. Actions you took for the organisation, and your invitation and removal, stay in its audit records for the retention period below.

Uninstalling Hongi

Uninstalling removes app storage according to your operating system's rules. iOS Keychain items can survive uninstalling. Use the in-app deletion action before uninstalling to remove personal-contact secrets and work-account tokens. Uninstalling does not send a request to erase organisation pairings, server logs or other server records.

Request Access to or Deletion of Server Data

Email privacy@hongi.io with your request. If available, include the organisation and your Hongi ID, or other context that helps us locate the record. We may need proportionate verification that the request concerns your data. Do not send cryptographic secrets or live codewords.

Tell us if you have already uninstalled the app or could not complete notification unregistration. We will explain what we can locate, delete or retain, and any security or legal limitation. An organisation you interacted with may hold its own records; its privacy notice also applies.

Retention After Local Deletion

• Pairing relay: session records expire automatically, with a standard server lifetime of 30 minutes. Related operational logs are separate.
• Notification registrations: removed on successful unregistration or invalid-device feedback. The 180-day inactivity expiry restarts on re-registration or a delivery lookup, so uninstalling is not a guarantee of deletion after 180 days.
• App Attest keys: eligible for cleanup after 90 days without use; cleanup runs on subsequent store activity.
• Operational logs: the production logging configuration retains these for 30 days.
• Organisation records: retained for verification, recovery and security. Organisation-associated audit retention defaults to 1,095 days and internal audit retention to 2,555 days, subject to organisation-specific settings and scheduled deletion.
• Work accounts: you need to sign in again after 7 days without use, and at the latest 30 days after signing in. Your sign-in login stays on our sign-in service until you ask us to delete it, even after your organisation removes you.
• Backups and providers: copies may remain until their retention cycles end. Deletion from an active service is not instant deletion from every backup or provider.
• Organisation waiting-list sign-ups: a sign-up submitted through the website that is never confirmed by the emailed confirmation link is deleted automatically 7 days after the most recent confirmation email (a fresh 7 days if you request a new one).

See the Privacy Policy for the information processed by each feature, recipients and your rights.

Contact

Lovit BV, Asse, Belgium
privacy@hongi.io