Data retention policy

We keep personal information only as long as it is needed to provide practice, and then delete it. This policy applies to every account, with the same rules for children.

Schedule

• Active accounts: account details, practice sessions and answers are kept while the account is in use.
• Inactive accounts: if an account is not used for 24 months, we email a warning to the account holder (or the parent, for a child profile). If it is still unused 30 days later, the account is scheduled for deletion.
• Deletion requests: when you delete your account, or a parent deletes a child's profile or revokes consent, the account is signed out and blocked at once and permanently deleted 7 days later. A parent-deleted child profile is removed immediately.
• What deletion removes: the sign-in record, account details, every session, every answer, the list of questions seen, and subscription links. For a parent, under-13 child profiles are deleted too.
• What is kept: an anonymised revenue record (exam, status, period end, with no name, email or account link) needed for accounting; and the consent log (when and how a parent gave or revoked consent), which is required to show we obtained consent.
• Payment records held by Stripe follow Stripe's own legal retention obligations.
• Backups roll over within our hosting provider's backup window, after which deleted data is gone from backups as well.

How it runs

An automated job runs every day at 03:00 UTC. It executes deletion requests whose 7-day grace period has passed, sends inactivity warnings, and schedules deletion for accounts that remained inactive after the warning. The time windows are stored as settings so they can be shortened, never silently lengthened without updating this page.