Last updated:
Data Deletion & Privacy Rights
You have full control over your data. This page explains how to delete your account, export your data, or exercise your rights under GDPR and CCPA.
Your Rights
Right to Erasure
Request permanent deletion of your account and all personal data we hold about you (GDPR Art. 17 / CCPA).
Right to Portability
Download a complete copy of your data in JSON format at any time from within the app (GDPR Art. 20).
Right to Access
Request a summary of all personal data we hold about you, including how it is used and with whom it is shared.
Right to Rectification
Correct or update any inaccurate personal data via your Profile settings or by contacting us directly.
Right to Object
Opt out of AI training data use, marketing emails, or any processing of your data for profiling purposes.
Right to Complain
If you believe your rights have been violated, you may lodge a complaint with your local supervisory authority.
How to Delete Your Data
Option 1 (Preferred): Delete from within the App
The fastest path. Tapping “Delete Account” in the mobile app schedules deletion with a 30-day grace period during which you can cancel.
- Open the Donny Wonny mobile app and sign in.
- Go to Settings, scroll to the bottom and tap Delete Account.
- Confirm the prompt to schedule deletion.
- You'll be signed out. If you change your mind within 30 days, sign back in and tap Cancel scheduled deletion in Privacy Settings, or email privacy@donnywonny.com to cancel.
After the 30-day grace period, a daily job erases your account, Donny companions, journals, mood logs, conversations, and other personal data from our active systems, so removal completes within about 31 days of your request. Encrypted backups may retain data for up to 30 additional days. Direct messages: we anonymize your side of server-stored DM metadata; end-to-end encrypted ciphertext may remain in a counterparty's conversation history on their device (we cannot delete copies stored only on another user's phone). Anonymized aggregates and legally-mandated billing records are retained as described in the table below. If you need immediate (non-scheduled) deletion, use Option 2 or Option 3.
Option 2: Request Deletion via Email Verification
Enter the email registered to your account. We'll send a one-time confirmation link (valid for 24 hours). Clicking that link permanently deletes your account — no one else can trigger this without access to your inbox.
Option 3: Submit a Request by Email
If neither of the options above works, email us directly. For your security, requests must be sent from the email address registered to your account. Requests sent from any other address will require additional ID verification before we can process them — this protects you from unauthorized deletion of your data.
- Subject: Data Deletion Request
- The email address registered to your account
- Your username (if known)
- What you are requesting (full deletion, export, or specific data)
Export Your Data First (Optional)
Before deleting, you can download a machine-readable JSON copy from the app at any time (free on every plan).
- Open the app → Settings → Export Data
- Tap Export My Data, choose what to include, and confirm
- When the file is ready, choose Save to phone or Share to keep your JSON export. Open it in Files, a text editor, or a desktop browser. Premium or Together can also export journals as Markdown or PDF on the same screen.
Import Your Data (Mobile App)
You can bring journal entries or background context for Donny into your account from the mobile app.
- Open the app → Settings → Privacy → Import data
- Choose Journal entries (JSON/CSV) or What Donny should know (paste context)
- Confirm the import — entries sync to your account; context becomes editable memory facts
Only import content you have the right to use. Imports are authenticated, rate-limited, and logged for security.
Timelines & What Gets Deleted
| Data Type | Deleted? | Timeline |
|---|---|---|
| Account info (name, email) | Yes | Immediately with Option 2; within about 31 days with Option 1 |
| Journal entries | Yes | Within about 31 days of your request |
| Mood logs | Yes | Within about 31 days of your request |
| AI conversations | Yes | Within about 31 days of your request |
| Direct messages (E2E) | Your metadata anonymized on our servers | Within about 31 days of your request; counterparty may retain encrypted copies on their device |
| Donny companion memory | Yes | Within about 31 days of your request |
| Profile photo / media | Yes | Within about 31 days of your request |
| Anonymized analytics (aggregated) | Retained | Cannot identify you |
| Billing records (required by law) | Retained 7 years | Legal obligation (IRS / tax law) |
| Backup copies | Purged | Up to 30 additional days in encrypted backups |
Data Controller
Donny Wonny LLC
539 W. Commerce St #5827
Dallas, TX 75208
privacy@donnywonny.com