Delete your Cruiwse Control account

The app

This page is for Cruiwse Control, the app Bow Tie Club publishes on Google Play (developer: Bow Tie Club), run by Bow Tie Club BV — and for its test version, Cruiwse (dev). It explains how to delete your account, what is deleted and what is kept.

In the app

1. Open the app and go to Me › Settings — or, if your account is still waiting for a role, stay on the Awaiting approval screen.
2. Tap Delete account.
3. Sign in again when the app asks, and confirm.

Your account is closed at once and you are signed out. The rest of your data is erased within minutes; a second pass, about an hour later, removes what a device that was still signed in wrote in the meantime, except into the legal record or someone else's record.

Without the app, by e-mail

1. Write to privacy@cruiwsecontrol.be and name the e-mail address of the account you want deleted.
2. The sender of an e-mail can be forged, so an e-mail alone deletes nothing: we send a confirmation request, with a one-off code, to the address on the account.
3. Reply to that message quoting the code. An administrator then deletes the account, and we confirm the deletion to the same address.

We do this within one month of your request.

What is deleted

• Your login, with every way you sign in.
• Your profile: your name, e-mail address, photo, bio and role.
• Your availability, leave days and leave balance, the grades and feedback given to you, your notifications and your registered devices.
• The evaluations in Learn: your answers to the evaluations and the score the app gives them.
• Every message you sent, in any chat, group or announcement, and the quotes of them in other people's replies.
• Your direct messages. A direct-message conversation is deleted whole: the other person's messages in it go too.
• Your leave requests that were not decided yet.
• The notifications in other people's lists that name you, such as a leave-request notice.
• The briefings the app generated for events you are on; a planner can generate them again.

Your name also goes from every other record except the legal record below. You leave the crew of every event that has not started, and the groups and announcement lists you were in. On an event that has started and whose report is not final, you leave its shift leaders unless you already signed its report. A chat's preview of your last message is replaced, and your name as the author of a briefing or a video is cleared. Where a record still points at you, the app shows "Former member".

What is kept, and for how long

Bow Tie Club keeps the legal record an employer must keep, for 5 years after your last shift, linked only to your account id:

• your timesheets, with the signature that confirmed them;
• your decided leave requests — the type, the dates and the decision — without your reason or the manager's note;
• the finalized event reports, with their sealed PDFs.

A finalized event report keeps, sealed, your name, your grades and the feedback written about you. It is signed evidence, and its content cannot change.

A marker that holds only your account id records that the account was deleted, for as long as these records exist. A record of the deletion itself — the account id, the dates and counts, never a name or an address — is kept for 30 days, so that a backup restored in that time has the deletion applied again. Your account id also stays in other people's records — for example who gave a grade, who confirmed a timesheet or decided a leave request, who pinned a message or sent an announcement, who signed a report and its audit trail, and the crews of events that have started — where it names nobody once your profile is gone. Events, uploaded briefings, videos and templates that planners wrote are not your data, and they stay.

What remains elsewhere for a while

• Crash reports that carry your account id: 90 days.
• The app's server logs: until Google Cloud's log retention removes them.
• The database backups and the copies of deleted files: 7 days. A backup cannot be edited, so your data is gone from every backup at most 7 days after the deletion. If a backup is ever restored, your deletion is applied again before the data is used.
• A document someone else uploaded that mentions you is not searched for your name. Tell us at privacy@cruiwsecontrol.be if you know of one.
• An app still signed in on another device can keep working for up to an hour. It can read only what you could read before. What it writes into the legal record or into someone else's record stays, as if written just before the deletion; everything else it writes is removed by the second pass.

Questions

For questions about your data, write to privacy@cruiwsecontrol.be. How Bow Tie Club processes personal data is set out in the privacy notice.