Ištrinkite savo paskyrą

1. Who we are

Lastribe is operated by EnableUnion SASU, a French simplified joint-stock company registered in Thionville, France. Lastribe is the trade name shown on the Apple App Store and Google Play; the mobile app's package identifier is eu.enableunion.lastribe. Full company identification, registered office, and publication details are in our legal notice.

This page tells you how to permanently delete your Lastribe account and what happens to your data when you do.

2. How to delete your account

Before you delete: your Core subscription. Deleting your Lastribe account does not cancel a Core subscription taken through the App Store or Google Play — the store keeps billing it. Cancel it first from Profile › My subscription › "Manage or cancel in the store", or from your store settings (Terms of Service, Section 8.5). The app reminds you of this before deletion.

Option A — In-app (recommended)

1. Open the Lastribe mobile app and sign in.
2. Go to the Profile tab.
3. In the settings list, open GDPR & Privacy.
4. Tap Delete Account.
5. Confirm in the dialog by tapping Yes, Delete My Account.

What happens next:

• Your account is scheduled for deletion and the app signs you out immediately.
• A 30-day grace period lets you change your mind: signing back in within those 30 days restores the account and cancels the deletion.
• After 30 days the deletion is final: all data listed in §3 is hard-deleted.

Option B — By email (if you cannot access the app)

If you cannot reach the in-app screen (lost device, locked out, etc.), email privacy@lastribe.eu from the address registered to your account, with the subject line:

Account deletion request — your account email

We respond within 30 days, as required by GDPR Article 17. You can use dsa@lastribe.eu instead if your request also concerns DSA / content moderation matters.

You do not need to give a reason. We may ask for additional information only to verify your identity and prevent unauthorized account deletion.

3. What is deleted

When the hard-delete runs (at the end of the 30-day grace period, or once we have verified an email request), the following data tied to your account is permanently erased from our production database and file storage:

• Profile: name, email, date of birth, avatar, city, home address, language and preferences
• Household: your membership; the Household itself, with its members, pets, inventory and medical information, when you were its last active member
• Inventory & autonomy: all inventory items you added, autonomy data, expiry tracking history
• Academy: course progress, quiz attempts, badges, XP, level history
• PrepScore: domain scores, score history, contribution breakdown
• Places and routes: places you saved, hazard reports you published, evacuation routes you drew, monitored places
• Messages: Tribe messages, Household messages and direct conversations (in both directions) — deleted, not anonymised
• Community: comments, votes, Tribe memberships (you are removed from every Tribe you joined; a Tribe you led is handed to another member or deleted)
• Safety: safety statuses and SOS, with the location (position) sent with them
• Events (where enabled): participations, submitted evidence (photos, videos, GPS coordinates)
• Panic mode: nothing to delete on our side — your emergency contacts and panic history live only on your device and disappear when you uninstall the app or sign out
• Notifications: push tokens, device identifiers, notification preferences and the 90-day notification history
• Security: sign-in log, sessions, lockout counters, consent records
• Analytics: the PostHog person and events linked to your account (see below)

We also act on the personal data held by our processors:

• PostHog (analytics): we call PostHog's person-deletion API to delete the analytics person and its events; the job retries until it succeeds.
• Sentry (crash logs): Sentry does not provide a per-user deletion API. Crash data is minimised on the device (no e-mail, no IP) and purged automatically after 90 days, after which it is no longer joinable to a deleted account.
• Resend (transactional email) and RevenueCat (subscriptions): we keep no marketing lists in these processors. Subscription and payment records are kept only for the legal retention described in §4.

4. What is retained, why, and for how long

Some records are kept after account deletion where French or European law requires it. None of them identifies you by name or e-mail once the deletion has run.

Data	Retention period	Legal basis
Subscription and payment records	10 years	French Code de Commerce art. L123-22 — accounting obligation; Code général des impôts art. 102 B — VAT
Reports of illegal content and their evidence	30 days after a dismissed report; 6 months after any other decision	Digital Services Act Articles 16-17; Regulation (EU) 2021/784 Article 6 (evidence preservation)
Moderation decisions	Kept with an opaque identifier	Digital Services Act Article 17
Administrator audit log	Life of the platform (opaque identifier, no personal content)	Accountability (GDPR Article 5(2))
Crash logs (Sentry)	90 days max	Minimised on the device; not joinable to a deleted account
Aggregate analytics (PostHog)	Indefinite	Aggregated and anonymised; cannot re-identify you
Backups	Up to 30 days	Deleted data leaves the encrypted backups within 30 days (local copies 7 days, off-site copies 30 days)

After 10 years, payment and tax records are also purged from our archives.

5. Confirmation

• In-app request: the app confirms on screen that the deletion is scheduled and signs you out. Signing in again within 30 days cancels it.
• Email request: we confirm by email once your identity is verified and the deletion is scheduled.
• We send no further email when the erasure completes: your account no longer exists and we keep no address to write to. If you want to check, write to privacy@lastribe.eu after the 30 days; we answer from our records.

6. Questions

• Data protection: privacy@lastribe.eu
• DSA / content moderation: dsa@lastribe.eu
• General support: support@lastribe.eu
• Postal address: EnableUnion SASU, 7A rue Neuve, 57270 Uckange, France

You also have the right to lodge a complaint with the French data protection authority (CNIL, www.cnil.fr) or with the supervisory authority of your EU country of residence.