Privacy in the Data Model

Entitlements retain the transaction references needed for access and reconciliation. Current public activity visuals use synthetic data; private quiet-circle structures expose no public profile feed, precise location or free-text post.

Payment, entitlement and deletion events leave database records, and cohort-structure exports are scoped. Account deletion is operational on the web and implemented in the native release candidate; store availability and end-to-end native sign-off remain pending.

The safest personal field is the one the schema never requested.