BeanPool Icon BeanPool
How It Works The Rules Features Help Get Started

Data Deletion Instructions

Last Updated: October 1, 2026

BeanPool has no central account server. Your identity is a cryptographic keypair held on your own device, and your data lives on the community nodes you chose to join. That shapes how deletion works: most of it you can do yourself, immediately, from inside the app.

1. Deleting data from a connected platform account (Instagram, TikTok, YouTube, SoundCloud, RSS)

If you connected a publishing account so your public posts appear in your community's Pulse feed, there are two levels of removal.

Disconnect the channel

In the app: Settings → Channels & showcase, find the platform card, and tap Disconnect.

This immediately deletes the platform access token from your device and clears the channel's verified status on the node. No further posts are retrieved. Posts already listed in the feed remain visible until you delete them or the channel, or until newer posts from the same channel push them out under the retention limit described below.

Delete the channel

In the app: Settings → Channels & showcase, open the platform card, and tap Delete.

This is the complete removal. The node immediately scrubs the channel record and every feed item imported from it — the post URLs, titles, captions and thumbnail URLs are overwritten to NULL in the database, not merely hidden. What remains is each item's identifiers (the platform name and the platform's post identifier, and your member public key), its publication date and category, and timestamps, which exist only so that other nodes replicating the deletion converge on it.

The node also keeps a cached copy of each post's preview image so the feed loads quickly. Deleting the channel removes those cached images from the node's memory and disk in the same operation — not on their next request, and not when the cache next fills up. That is true whichever way an item goes: deleting a single post, deleting your account, the automatic retention pruning below, or a moderator taking an item down.

Automatic retention limit

Independently of anything you do, the node keeps only the 20 most recently published items from each channel. Older items beyond that are pruned automatically, with the same scrubbing applied. Items are not removed on age alone, so a channel that stops posting keeps its last 20 items until you delete them or the channel.

2. Deleting your entire BeanPool account

In the app: Settings → Account Deletion & Sign Out → Permanently Delete Account, and confirm by typing DELETE or your name. It deletes your account in the community you are using; your accounts in other communities stay. If that was the last community on the phone where you are a member, your identity keypair is erased from the phone too.

What the node deletes at once

  • Your profile: your callsign, avatar, bio and contact details are cleared, and your member record is reduced to an anonymous placeholder ("Deleted Member"). The values are overwritten in the database, not merely hidden.
  • Your posts: their words, photos and places are wiped, and your listings are cancelled. A poll you asked keeps its question and its votes.
  • Every chat message you wrote reads "This message was deleted", and the photos you sent are deleted from the node's storage.
  • Your friends, your block list, your sign-in recovery copies and the addresses the node sent your notifications to.
  • Connected channels and every feed item imported from them, with their cached preview images, as described in section 1. Deleting your account also removes your syndicated Instagram or TikTok posts.
  • Your callsign and public key in the node's activity log: every line that names you then reads "a deleted member".

Any remaining balance is settled to your community's Commons Pool, since a mutual credit ledger has to stay in balance when a member leaves.

For the same reason, ledger entries recording trades between you and other members are retained in the community's transaction history. Those entries are what keep other members' balances correct, and erasing them would silently alter the record of trades other people made in good faith. They carry no profile data once your account is purged.

One condition: the node will refuse to purge an account with a trade still in escrow or a cross-node settlement in flight, because doing so would strand the other party. Complete or cancel those first, then purge.

What stays for a while

  • A standby copy of the node, where a community runs one, takes the deletion at its next copy.
  • Snapshots. A node keeps a daily copy of its database so its operator can undo a mistake. A copy taken before you deleted still holds your data until it is removed: after 7 days with the default settings, and never more than 14 days.
  • Backups an operator downloaded are files outside the node. They keep your data until the operator deletes them.
  • Deletion records. A short record of each deleted row, such as which two members were friends, stays for 30 days so that every copy of the node converges on the deletion.
  • Logs. The node's activity log keeps no line longer than 30 days. The node's console output, kept by Docker, cannot be edited after the fact: it is capped at 10 MB and drops its oldest lines as it fills, which on a quiet node can take weeks.
  • Another person's phone may keep older direct messages from you that it had already downloaded, like a screenshot.
  • Notices kept for other members. For 7 days the node keeps the details of each notification it sent to the people you wrote to or dealt with. When you delete, your name and key are taken out of them (a notice that read “Wren sent you a message” reads “A member sent you a message”). The rest of a notice, such as which chat it was for, stays until its 7 days are up.

3. Revoking BeanPool's access from the platform's own settings

Deleting data held by BeanPool is separate from revoking the authorisation you granted the platform. You can do that on the platform directly, and we recommend doing both:

  • Instagram: Settings and privacy → Website permissions → Apps and websites
  • TikTok: Settings and privacy → Security and permissions → Apps and services permissions

4. Requesting deletion by email

If you no longer have access to your device or your identity keypair, you cannot authenticate to the node, and the in-app routes above will not be available to you. In that case, email [email protected] with the community node you joined and the callsign or platform username you used.

We will action verified requests within 30 days. Please note that each community node is operated independently; where a node is run by a local operator rather than by us, we will pass your request to that operator and confirm to you when it has been actioned.

Related

Section 6 of our Privacy Policy sets out exactly what is stored when you connect a publishing account, and what is not.

BeanPool Icon BeanPool

Decentralized mutual credit & federated community exchange.

Help Centre GitHub YouTube Reddit How It Works Getting Started The Rules Child Safety Privacy Policy Terms of Service

Open source under MIT license. Made with love by communities, for communities.