Retention depends on the information and its purpose. Digital-account deletion does not erase all community records. Unnecessary information is erased or irreversibly anonymized; obligations and justified exceptions are assessed separately.
Digital account and credentials
A valid deletion confirmation closes mobile-app access across all communities and invalidates sessions, codes and links. The account and credentials are deleted, rather than merely disabled. Independent administrative access to community systems is outside this action.
Devices and personalization
App-only device associations, push tokens, settings, favorites, read states and personalization are deleted. They are not restored when a new account is created.
Exclusively digital content
Personal files, messages and content without an independent institutional purpose are deleted together with applicable references and controlled copies. A community’s shared file is not deleted merely because the user authored it.
Person and institutional roster
Identity and contact information needed for an ongoing community relationship may be retained for that purpose. They do not reactivate the digital account. A person created solely for digital use is not automatically retained without an independent basis.
Reservations and institutional operations
Deleting the app account does not cancel reservations, requests or procedures, nor erase institutional records that must be retained. Contact your community’s Administration directly about these records.
Accepted identity data
Verified fields and accepted document history are separate from the photos used to read them. Necessary identity fields follow their institutional purpose; photographs have a different treatment and retention period.
Images and diagnostics
Photos, unsuccessful readings and technical records have limited, differentiated retention. Deletion or redaction covers relevant SK ONE-controlled copies; complete evidence is not retained by default.
Minimal deletion record
A minimal record is retained for five years from resolution to demonstrate handling and prevent improper reactivation. It contains only necessary reference, dates, scope, policy version and outcome, not a full profile or copies of erased data. Its expiry does not reactivate the account; a new explicit registration is required.
Temporary confirmation recipient
The recipient is erased once delivery is confirmed. Otherwise, delivery handling has a maximum of seven days from verified active-data deletion, after which the recipient is erased and private-reference/operational follow-up remains. Failure is not reported as completed deletion.
Exceptional retention
A specific incident, dispute or valid requirement may justify separate retention of identified records with a documented reason, scope and responsible party. Exceptions are reviewed every ninety days. When lifted, the original expiry applies; already-expired data is erased within thirty days unless a specific obligation applies. The exception does not restart retention or keep the digital account active.