ai_ml_operations/chat_web_app
2
0
Fork 0
Code Issues 16 Pull Requests Actions Packages Projects Releases Wiki Activity

Google Play: public account deletion request URL #103

New Issue
Closed
opened 2026-08-04 03:59:26 -07:00 by westfarn · 0 comments
westfarn commented 2026-08-04 03:59:26 -07:00
Owner
Copy Link
Copy Source

Why

Google Play Console requires a public URL on the store listing for account deletion (Data safety / Account deletion). That link must:

  1. Refer to the app or developer name shown on the listing (Hesychia / ai.hesychia.chat)
  2. Prominently feature the steps users take to request that their account is deleted
  3. Specify which data is deleted vs kept, and any additional retention period

This is separate from in-app self-delete (already shipped: Account → Delete account → DELETE /api/user/, backend #34). Play needs a discoverable web page that works for reviewers and users who never open the app.

Current state

Piece Status
In-app delete (/account/ → DeleteAccountSection) Done
Soft-delete API (DELETE /api/user/) Done (backend #34)
Public Play-listing URL with steps + data retention copy Missing

Backend soft-delete today: sets deleted=True / is_active=False, soft-deletes conversations, blacklists tokens. Personal data is retained under soft-delete for admin/audit; full purge (chats, documents, RAG vectors, auth events) is documented as a follow-up in account_deletion.py.

Acceptance criteria

  • Public, stable HTTPS page (e.g. https://hesychia.ai/account-deletion/ or similar) that does not require sign-in to read
  • Page title / body clearly names Hesychia (and developer if required by listing)
  • Steps are prominent and accurate, covering at least:
    1. Open Hesychia (app or web)
    2. Sign in
    3. Go to Account
    4. Use Delete my account and confirm with email
  • Optional but recommended: alternate path if user cannot sign in (e.g. email support) with clear SLA / contact
  • Explicit sections for:
    • Data deleted / deactivated immediately (access revoked, account inactive, conversations hidden, sessions invalidated)
    • Data retained (what remains after soft-delete)
    • Retention period before hard purge (or state honestly if soft-delete-only for now, and file/link a follow-up for purge)
  • Linked from Play Console “Account deletion URL” field
  • Document URL in ANDROID.md / android/README.md Play checklist
  • Route is public in SPA (no auth guard); works on HashRouter / mobile WebView if we reuse the same host

Suggested content outline

Hesychia — Request account deletion

How to delete your account
  1. …
  2. …

What happens when you delete
  - Deleted / deactivated: …
  - Kept (and for how long): …

Cannot access your account?
  - Contact: …

Notes / open questions

  • Confirm final product URL host (hesychia.ai vs current chat host) before publishing the Play field.
  • Align retention copy with Legal / privacy policy; if hard purge is not shipped yet, page must not claim full erasure.
  • Apple App Store has a related in-app deletion guideline (IOS.md); this issue is specifically the Play listing URL requirement.

Refs

## Why Google Play Console requires a **public URL** on the store listing for account deletion (Data safety / Account deletion). That link must: 1. **Refer to the app or developer name** shown on the listing (**Hesychia** / `ai.hesychia.chat`) 2. **Prominently feature the steps** users take to request that their account is deleted 3. **Specify which data is deleted vs kept**, and any **additional retention period** This is separate from in-app self-delete (already shipped: Account → Delete account → `DELETE /api/user/`, backend #34). Play needs a **discoverable web page** that works for reviewers and users who never open the app. ## Current state | Piece | Status | |-------|--------| | In-app delete (`/account/` → `DeleteAccountSection`) | Done | | Soft-delete API (`DELETE /api/user/`) | Done (backend #34) | | Public Play-listing URL with steps + data retention copy | **Missing** | Backend soft-delete today: sets `deleted=True` / `is_active=False`, soft-deletes conversations, blacklists tokens. **Personal data is retained under soft-delete for admin/audit**; full purge (chats, documents, RAG vectors, auth events) is documented as a follow-up in `account_deletion.py`. ## Acceptance criteria - [ ] Public, stable HTTPS page (e.g. `https://hesychia.ai/account-deletion/` or similar) that does **not** require sign-in to read - [ ] Page title / body clearly names **Hesychia** (and developer if required by listing) - [ ] Steps are **prominent** and accurate, covering at least: 1. Open Hesychia (app or web) 2. Sign in 3. Go to **Account** 4. Use **Delete my account** and confirm with email - [ ] Optional but recommended: alternate path if user cannot sign in (e.g. email support) with clear SLA / contact - [ ] Explicit sections for: - **Data deleted / deactivated immediately** (access revoked, account inactive, conversations hidden, sessions invalidated) - **Data retained** (what remains after soft-delete) - **Retention period** before hard purge (or state honestly if soft-delete-only for now, and file/link a follow-up for purge) - [ ] Linked from Play Console “Account deletion URL” field - [ ] Document URL in `ANDROID.md` / `android/README.md` Play checklist - [ ] Route is public in SPA (no auth guard); works on HashRouter / mobile WebView if we reuse the same host ## Suggested content outline ``` Hesychia — Request account deletion How to delete your account 1. … 2. … What happens when you delete - Deleted / deactivated: … - Kept (and for how long): … Cannot access your account? - Contact: … ``` ## Notes / open questions - Confirm final product URL host (`hesychia.ai` vs current chat host) before publishing the Play field. - Align retention copy with Legal / privacy policy; if hard purge is not shipped yet, page must not claim full erasure. - Apple App Store has a related in-app deletion guideline (`IOS.md`); this issue is specifically the **Play listing URL** requirement. ## Refs - In-app: `DeleteAccountSection` on `/account/` - Backend: [chat_backend#34](https://git.aimloperations.com/ai_ml_operations/chat_backend/issues/34), `soft_delete_account` - Play: [android/README.md](android/README.md) (Hesychia / `ai.hesychia.chat`)
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
twestfall westfarn (Ryan Westfall)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: ai_ml_operations/chat_web_app#103