Data Retention Policy

Our approach

We keep personal data only as long as it is needed to teach the student and run the account, then delete it. Clean-up runs automatically every day.

Retention periods

• Account details and learning records: while the account is in use. Deleted within 30 days of a deletion approved by the parent or guardian.
• Inactive accounts: we review accounts with no sign-in for 3 years; we email the parent or guardian and delete the account 30 days later unless they ask us to keep it.
• Password-reset links: expire after 2 hours (24 hours when issued by support) and are removed after 7 days.
• Parent/guardian approval links: valid 14 days. A deletion request that is not approved in 14 days lapses and the account stays.
• "Remember me" sign-in tokens: up to 30 days, or until sign-out or password change.
• Security and account-action logs, and the email log: up to 1 year, then deleted.
• AI request records: up to 1 year; they never contain names or contact details.
• Contact messages: up to 1 year after the matter is closed.
• Payment records (once online payment is live): kept for the period Indian tax and accounting law requires, even after an account is deleted.
• Backups: deleted data can remain in encrypted backups for up to 30 days until the backup is replaced.

Anonymous statistics

We may keep totals that cannot identify anyone (for example "how many students completed the Fractions chapter") to improve lessons.