It doesn't do any type of personal data collection yet (aside from the questions you are answering).
My overall plan to deal with account management is to implement oauth on the main application, so that people can "login" to the site simply by proving ownership of their activitypub handle, and from there they would be able edit/extend/delete their profile.