Steps
Ordered actions showing actors, what they do, and which elements are involved. Each step often surfaces a requirement.
- 1.User: professional, 25-35User goes to Settings → Privacy → 'Download my data'
- 2.User: professional, 25-35User confirms the request (one-tap, no friction)
- 3.—User Service queues an export job to a worker process
- 4.—Export worker collects: profile, photos, value-prompt answers, match history, sent/received messages (E2EE blobs only), consent log
- 5.—Worker packages everything as JSON + raw photo files into a ZIP archive
- 6.—Worker uploads ZIP to S3 with a pre-signed URL valid for 7 days
- 7.—Notification Service emails the user a signed download link
- 8.User: professional, 25-35User downloads ZIP and verifies contents
- 9.—After 7 days, S3 lifecycle policy auto-deletes the ZIP
- 10.—Export job logged with timestamp + user ID + bytes-transferred for audit; retention 5 years per GDPR
Derived requirements
Requirements that explicitly list this scenario in their scenario_ids. Open a requirement (requirements list) and check the "Scenarios" field to link more.