Retention schedule

Pre-GA target, updated August 9, 2026

Not fully implemented. These are production targets and release gates, not claims about the current beta backend.

Encrypted relay message delivery copies: 90 days.
Messages on the device: until the member deletes them or local app data.
Raw operational logs: 14 days.
Aggregate product metrics: 13 months.
Completed verification media: vendor redaction within 24 hours.
Closed moderation evidence: 12 months unless legal hold or a shorter local requirement applies.
Push, recovery, profile, and revocable media data after deletion: within 24 hours.

Country policy, legal holds, fraud prevention, and safety obligations may require different periods. Production must record and expose those differences before enabling a country.