Delete a ГоГулять account and data

DRAFT 2026-11-08-draft. LEGAL REVIEW REQUIRED. Verify menu labels and a working contact address before publication.

Effective date: {{EFFECTIVE_DATE}}. Controller: {{OPERATOR_FULL_NAME}}, address: {{OPERATOR_ADDRESS}}. Requests: {{PRIVACY_EMAIL}}.

In the app

An adult or independent participant opens account settings and selects deletion. The legal representative holding the managed account's owner role selects the child in parent mode and requests deletion. A second representative may contact the controller to exercise the child's rights even without that button.

Before deleting an adult, the service must explain effects on linked children. A child with no remaining representative in the service must also be deleted. Keeping a child's account with a remaining representative requires properly assigned rights; data cannot automatically be transferred to an arbitrary person.

Ordinary deletion of an owner with a second representative first requires a separate role transfer and the second representative's explicit acceptance. Transfer is not automatic. This technical procedure does not remove the adult's right to ask the controller to cease processing or extend statutory response or performance deadlines.

Without login

Email {{PRIVACY_EMAIL}} with subject “ГоГулять account deletion”. Provide your account email, or an available child-account identifier and your representative relationship. Do not send passwords, pairing codes or a full passport copy. We offer proportionate identity and authority verification. A new account is not required. You may also write to the controller's address.

Timing and effects

An ordinary request immediately hides the account, revokes sessions and stops normal use. There are 7 days to cancel explicitly; login alone does not cancel. The live database then loses the profile, settings, relationships, places, walks and participation, notifications, sessions, consent records and daily activity. Special requests concerning unlawful processing or consent withdrawal may require earlier action under law.

Reports are cleared of identifying information from the deleted profile. Administrator audit may retain limited action information, including object identifiers, for up to 2 years, without open nicknames, email or coordinates. These identifiers are not automatically anonymous. Other retention requires a specific lawful basis and period explained in the response.

Existing encrypted backups rotate out within 14 days. Deletions must be reapplied after restoration before service resumes. Earlier legally required destruction takes precedence. Irreversibly anonymous aggregates may remain. Information already seen or screenshotted by others cannot be recalled; separately contact the controller about a saved place containing your personal data.

Uninstalling the app does not delete the account. Turning off push stops notifications, not all processing. Consent for an individual feature can be withdrawn without requesting whole-account deletion. See the policy.

Withdraw individual purposes

Withdraw push and analytics in app settings; for a child use “Child consents” in parent mode. Both purposes are optional and off by default. Withdrawing push deletes tokens and prevents queued notifications from being sent; withdrawing analytics immediately stops recording and deletes daily activity records. The account remains available. If you cannot sign in, send a separate request to {{PRIVACY_EMAIL}} identifying the account and purpose, without passwords or codes. Withdrawal of the main service purpose uses account deletion; for a child the owner performs this action, with effects explained beforehand.