Retention and Deletion
Active data
We keep information while the relevant account remains active.
Deleted student work
Deleted work is soft-deleted immediately and recoverable for 30 days. It is immediately excluded from assessment, analytics, class learning priorities, reports and student profiles, and is permanently removed from live systems after 30 days.
Closed accounts
Educational data is deleted from live systems within 90 days of account closure. The account owner can export before deletion, ordinary access is blocked after closure, and a scheduled deletion date is shown.
Backups
Deleted information may remain in encrypted backups for up to a further 90 days. Backups are used only for disaster recovery, are not accessible through normal account features, and are not used to restore a user's deleted data on request. If a backup is restored, deletion instructions are re-applied.
Audit logs
Audit records are retained for 12 months. They never contain raw student writing, handwriting images, full AI prompts or sensitive teacher notes — only internal id, action, user id, timestamp, previous/new state and the relevant record id.
Financial data
Financial data is retained only as legally or operationally required, and is never a reason to retain student work.