Delete your Bridgefolk account

Bridgefolk is provided by Lattice Labs Pte. Ltd., Singapore, shown on Google Play as “Lattice Inc”. These instructions cover iOS and Android. Updated 1 November 2026.

Delete in the app

To delete analytics already sent to PostHog as well, email us first using the instructions below. Wait for us to confirm analytics deletion before using “Erase all data”. We need the existing account to match your username to its analytics records.

On both iOS and Android, tap the avatar with the gear on the home screen to open Settings. Scroll to Dangerous and tap “Erase all data”. In “Erase all my data?”, confirm with “Delete all my online data and erase all my data”.

You need an internet connection. The app waits for the server to confirm account deletion before erasing local data. If you see an error, reconnect and try again. This action cannot be undone. Signing out or uninstalling the app does not delete your online account.

Request deletion without the app

Email team@latticelabs.app from any email address with the subject “Delete account” and your Bridgefolk username. Do not send your PIN or session credentials. We use your username to locate the account and its PostHog records. We may ask for more information to verify the request, but never your PIN. We delete the PostHog person profile and events first, then the online account using the same server deletion process as the app, and confirm completion by email. Keep the account until we confirm completion. You do not need to erase it in the app as well to delete the online account.

In-app “Erase all data” does not delete the PostHog person profile or events. It removes the link between your username and the player ID used for analytics, so a former username alone cannot reliably identify those records afterwards. If you have already erased the account, contact us for help; we may not be able to locate its analytics records. Turning off “Share anonymous usage analytics” in Settings stops future PostHog collection on that device, but does not remove earlier data.

What is deleted

Account deletion removes your online profile, display name, username, avatar, salted PIN hash, active sessions, friends and removed-friend relationships, blocks you created, invitations, shared streak, push token and notification preference. It also deletes your multiplayer ratings (shown as Elo) and your account's rating history. All devices lose access to the deleted account.

Successful in-app deletion also erases games, history, learning and practice progress, the detailed streak and settings on that device. Email deletion cannot erase files stored on your devices; use the app or your device settings to remove them.

Nearby data

On both iOS and Android, server account deletion removes registered nearby public keys, private nearby history indexes, lifetime verified/rated counts and throttle records. Successful in-app “Erase all data” also removes this device’s nearby signing keys (Secure Enclave/Keychain on iOS; Android Keystore on Android), pending signed copies in the outbox, saved shuffle and move observations, and cached nearby history. The local game histories and stats are erased with the rest of the device’s game data. Signing out preserves pending copies and keys; it does not delete the account.

Shared completed nearby deals already uploaded remain readable by other original participants until seven days after first server acceptance. Reads and retries do not extend that deadline. Account recreation cannot recover old keys or private history. Other participants may keep their own local replays and exports.

Permanent anti-replay records retain transcript hashes, hashed table/generation/deal identities, one-way participant account-incarnation fingerprints and whether rating was applied. Key-owner tombstones retain a public-key hash and one-way account-incarnation fingerprint. They contain no full transcript, score, result or device public key. These prevent double scoring and reuse of old key proofs. Your ratings and rating history are deleted; other players’ rating history is not reversed.

What remains and for how long

Shared table records, including game history and chat, are not immediately erased by account deletion. They expire after seven days without a retention-extending game action or seat change. Continued play extends this period; chat and reconnection alone do not. Other players may still have local copies. Email us with the table code if you want us to investigate earlier deletion.

Daily Ten results linked to your random player ID remain until 32 days after midnight UTC at the start of the relevant game day. They are removed from public rankings as soon as your account is deleted. Anonymised aggregate statistics may remain, and other players' rating history is not reversed.

We retain the account's random ID and revoked session credential hashes to prevent old credentials being reused. These records have no automatic expiry. They do not contain your PIN or its hash. Rating event IDs and one-way event fingerprints are also kept without automatic expiry to prevent duplicate scoring. Your username can be used for a new account after deletion.

Moderation reports, including account IDs and any message evidence, remain for abuse investigations after either account is deleted. They have no automatic expiry. Blocks placed against your player ID by other accounts remain until those players unblock it or delete their accounts. You can ask about deleting reports or support correspondence by emailing the same address.

Server logs are kept for up to 30 days. Google and Apple SDK records follow their providers' policies. In-app deletion does not erase previous exports, other devices' local history or existing backups.

See the Bridgefolk privacy policy for the data we collect and how we use it.