GDPR is not at play here, private messages are essential data if one of the purposes of your app is messaging. But now they’ll have to delete them because they’re no longer necessary since the user can’t see them. Though it doesn’t have to be immediate.