Kumiko 0.407: inactive accounts get warned, then deleted
The opt-in feature tenant-inactivity mails the owners of an unused account before a deadline, for example 30 and 7 days ahead, and then files the regular deletion request with its waiting period. Data under a retention period stays until that period ends.
Free accounts that nobody uses still hold personal data. Keeping it without a reason runs against data minimisation, and deleting it without notice would surprise people who come back. Framework 0.407 adds tenant-inactivity, an opt-in feature for this case.
An app sets a rule per plan: after how long without activity an account counts as abandoned, and how far ahead the warnings go out, for example 30 and 7 days before the deadline. A plan whose rule is empty is exempt, so paying accounts can stay out entirely. A daily job checks every account. The warning mail goes to the account owners, since 0.411 also to its admins, and contains a link that keeps the account. A new sign-in, the link or an activity source the app provides, such as the last use of another app on the same account, starts the period over.
If the deadline passes without activity, the feature files the same deletion request an owner can file by hand. The waiting period of the compliance profile applies, so there is still time to stop the deletion. Rows that a retention period protects are not deleted early: they are anonymised and stay until their period ends, and only then is the account removed completely.
The mails exist in English, German, Spanish, French and Italian. Owners can query the account’s state: whether it is exempt, when it was last active, how many warnings went out and what comes next.