Draft for review by counsel. Not yet in force.
Data retention schedule
How long each kind of data is kept on our servers. This table is generated from the same list of rules that drives the automatic deletion job, so what you read here is what the code does.
| Data | What it holds | How long it is kept |
|---|---|---|
| Deletion receipts | What was deleted, when, who asked, and whether the tutor computer confirmed. | Kept as evidence that permission was given or that a deletion happened. Never used for anything else. |
| Evaluations | Results of checks and unit assessments. | Until you delete the learner from your dashboard. |
| Funding sources | Which program or card pays for your subscription. | Until you close your family account. |
| Guardian links | Which adults in your family may see which child. | Until you delete the learner from your dashboard. |
| Homeschool records | Records you add: affidavit, attendance, portfolio items, test results, evaluator reports, transcripts and receipts. | Until you close your family account. |
| Installed curriculum | Which curriculum packs your family has installed. | Until you close your family account. |
| Learner profile | First name or nickname, birth year, grade band and language settings. | Until you delete the learner from your dashboard. |
| Lesson summaries | Subject, language, when and how long, a short description of the work, and whether a required break or a safety referral happened. Never the child's words. | 730 days after it was created, then deleted automatically by a daily job. |
| Paired computers | The name and platform of each tutor computer and when it last connected. | Until you close your family account. |
| Pairing codes | The short code used once to pair a computer, stored hashed. | 7 days after it was created, then deleted automatically by a daily job. |
| Permission records | Your name and email at the time, the method used, when permission was given or withdrawn, and the payment identifier for card verification. | Kept as evidence that permission was given or that a deletion happened. Never used for anything else. |
| Review schedule | When each skill is next due for review. | Until you delete the learner from your dashboard. |
| Safety alerts | The category of a safety concern and whether you acknowledged it. Never what was said. | 365 days after it was created, then deleted automatically by a daily job. |
| Skill progress | Each skill and the level your child has reached in it. | Until you delete the learner from your dashboard. |
| Subscription | Plan, status and billing-period identifiers from our payment processor. | Until you close your family account. |
| Waitlist sign-ups | Email, state and page language from the public waitlist form. | 365 days after it was created, then deleted automatically by a daily job. |
Data on the tutor computer
The tutor computer keeps its own encrypted copy of your child's learning data and the evidence of each lesson. It lives in your house, not on our servers. Deleting a learner from your dashboard tells that computer to remove its copy, and the computer confirms back; the deletion receipt records that confirmation.