Retention schedule

• Raw play events: 90 days, then deleted.
• Weekly summaries: 24 months, then rolled into monthly summaries and the weekly rows are deleted.
• Monthly summaries: 7 years, then deleted.
• Caregiver accounts and child profiles: until a caregiver deletes the profile or the household account. Erasure then removes the child profiles and their play records.
• Data export files: 30 days, then deleted. You can ask for a new export.
• Audit logs: append-only, kept for 6 years by default. Erasure means access revocation, not row deletion. The audit period is jurisdiction-specific and counsel has not confirmed it.
• Billing records: no purchases are available in the beta. Payment-partner notification records are cut down to an id, a type, a status and timestamps after 72 hours, and deleted after 90 days.
• Support email: no fixed period is published yet.
• Pairing codes: purged on an hourly background job.

The service is set up to delete on the schedule above. Our operator switches automatic deletion on after reviewing a trial run that only counts what would be deleted, so until that step is complete some records may be kept longer than these windows.

Use the public deletion page or the grown-up settings in the app. The deletion page signs you in with your caregiver email and password, then erases the account.