Data Deletion Policy

1. Overview

In compliance with the Protection of Personal Information Act (POPI Act) of South Africa, WeSaidso provides users with comprehensive data deletion rights. This policy explains how to request deletion of your data, what data can be deleted, and our deletion timelines.

2. Your Right to Data Deletion

Under POPI Act Section 16 (Right to Erasure), you have the right to request deletion of your personal information when:

• The data is no longer necessary for the purpose it was collected
• You withdraw consent for data processing
• You object to processing and there are no overriding legitimate grounds
• The data was unlawfully processed
• Legal obligations require deletion

3. Types of Data Deletion

3.1 Individual Recording Deletion (In-App)

What gets deleted:

• Audio recording file
• Transcript text
• Recording metadata
• Associated analytics data

How to delete:

1. Open WeSaidso app
2. Navigate to your recordings list
3. Swipe left on the recording
4. Tap "Delete"
5. Confirm deletion

Deletion timeline:

• Immediate removal from your device
• Removed from Firebase within 24 hours
• Permanently deleted from backups within 7 days

3.2 VoiceVault Record Deletion (3-Step Process)

VoiceVault records are immutable by design to ensure integrity. Deletion requires 3 confirmations to prevent accidental deletion.

How to delete:

1. Settings → Manage Vault Records
2. Select the record to delete
3. Step 1: Tap "Delete" → Confirm "This is permanent and irreversible"
4. Step 2: Review transcript preview → Confirm deletion
5. Step 3: Type "DELETE" to confirm

What happens:

• Record marked as "deleted" (soft-delete)
• No longer visible in your vault
• Hash verification remains for audit purposes
• Actual data purged after 90 days (POPI retention period)

3.3 Account Deletion (Complete)

Deletes ALL your data from WeSaidso.

What gets deleted:

• User account and credentials
• All audio recordings
• All transcripts
• All VoiceVault records
• Usage history and analytics
• Subscription information
• Preferences and settings

How to delete:

1. Open WeSaidso app
2. Settings → Account
3. Scroll to bottom → "Delete Account"
4. Read warnings carefully
5. Type your email address to confirm
6. Tap "Delete My Account"

Deletion timeline:

• Immediate account deactivation (cannot log in)
• Data deleted from active systems within 30 days
• Backups purged within 90 days
• Confirmation email sent when complete

4. Data Deletion Request (Email/Written)

If you cannot access your account or prefer email request:

4.1 Processing Timeline

Request Type	Verification	Processing	Completion
Individual Recording	Instant (in-app)	24 hours	7 days (backups)
VoiceVault Record	In-app 3-step	24 hours	90 days (audit)
Account Deletion	Email verification	30 days	90 days (backups)
Email Request	1-7 days	30 days	90 days (backups)

We will respond to your request within 7 business days.

5. What Happens to Your Data

5.1 Immediate Actions (0-24 hours)

• Account deactivated (cannot log in)
• Data marked for deletion in database
• Access revoked from all devices
• Confirmation email sent

5.2 Primary Deletion (1-30 days)

• Data removed from Firebase Firestore
• Files deleted from Firebase Storage
• Removed from active systems
• Analytics data anonymized

5.3 Backup Purge (30-90 days)

• Removed from automated backups
• Purged from disaster recovery systems
• Deleted from archival storage
• Final confirmation email sent

6. Third-Party Data Processing

6.1 Google Gemini API

Data sent: Audio recordings (temporary)
Deletion: Audio is NOT stored by Google Gemini API
Action: When you delete your WeSaidso account, no additional action needed. Google Gemini does not retain your audio.

6.2 Firebase (Google Cloud)

Data stored: Transcripts, account data, VoiceVault records
Deletion: Controlled by WeSaidso deletion process
Action: When you delete your WeSaidso account, we delete your data from Firebase. Firebase backup systems purged within 90 days.

7. Data Export Before Deletion

7.1 Export Your Data First

Before deleting your account, we recommend exporting your data:

In-App Export:

1. Settings → Export Data
2. Choose formats: PDF (all transcripts), JSON (raw data), or Text (plain text transcripts)
3. Share via email or save to device

Email Export Request:

• Email privacy@wesaidso.app
• Subject: "Data Export Request"
• We send your data within 7 days

8. Contact Information

For data deletion requests and questions:

9. Complaints and Appeals

If your deletion request is not completed within stated timelines, you may lodge a complaint with:

South African Information Regulator:

• Website: https://inforegulator.org.za
• Email: inforegulator@justice.gov.za
• Phone: +27 (0)10 023 5207