Account deletion

Delete your Ristretto data.

You can delete your account yourself. These instructions also apply if you linked Telegram or WhatsApp.

Delete your account

  1. Sign in with the email address connected to your Ristretto account.
  2. Open Account settings.
  3. Under Delete account, choose Delete my account.

This action is permanent. It signs you out and stops future matching and Ristretto notifications. There is no recovery or undo flow in the service.

What is removed

The deletion process removes or clears:

  • Your real email address, name, role, company, introduction, topics, motivations, languages, time zone, LinkedIn URL, picture details, and other profile settings.
  • Your uploaded avatar file and your stored introduction, profile-answer, and reflection voice files.
  • Your private profile answers, post-Ristretto reflections, and match feedback.
  • Your availability, availability exceptions, weekly participation, and calendar connection, including stored encrypted Google tokens.
  • All booking holds and their personal details, including a name, email address, time zone, note, and confirmation token.
  • Your Telegram or WhatsApp identity link, related bot session, queued notifications, login links, and active web sessions.
  • Your native Apple and Google sign-in identity links, so a new native sign-in cannot recover the deleted account.
  • Referral records directly connected to your account or email.

What remains

Ristretto keeps a minimal account row with a random internal ID, a deletion timestamp, and non-identifying placeholder values. Past Ristretto records also remain so the other participant’s history and aggregate service records still make sense.

These past records may include the scheduled time, status, rescheduling history, cancellation reason, who cancelled as an anonymous internal ID, whether each person consented and connected, and approximate time present. Matching-round, operational job, and webhook delivery records may also remain. They are no longer connected to your name, profile, contact details, messaging identity, calendar tokens, picture, or voice files.

Safety cases, encrypted evidence deliberately submitted with them, blocks, decision logs, and appeals may remain when needed to protect members, prevent repeated abuse, explain a restriction, or resolve a dispute. Contact Ristretto if you want to request deletion or restriction of a particular safety record.

If you cannot sign in

Contact the Ristretto team through the same channel that invited you. Tell them that you cannot access your account and want to request deletion. They may need to verify that the account belongs to you before acting.

Do not send sign-in links, passwords, bot tokens, calendar tokens, or other credentials in your request.

Connected services and native private memory

Deleting your Ristretto account removes Ristretto’s stored connection data. It does not delete your Telegram, WhatsApp, Google, or LinkedIn account, or messages and calendar events already held by those services. You can separately delete messages or revoke access in each provider’s settings.

Native transcripts and personal memories are encrypted on the Apple device by default and are not held by this web service. If you did not enable encrypted iCloud sync, use Delete memory from this device in the native app. If sync is on, use Delete encrypted memory everywhere and wait until the app confirms the encrypted tombstone reached iCloud; this prevents another same-iCloud device from restoring an older copy. Do this before deleting the web account, because web account deletion ends the native session and cannot itself reach your private iCloud database.

For more detail, read the privacy notice.