Data Retention and Deletion

Updated October 27, 2026 · School consent notice version unchanged

Choose the controls for the account whose records you want to manage. Personal tutoring, home learning, and school records are not one combined account.

Independent personal tutoring

Your personal tutoring account and its saved answers and progress currently stay in the active application database until you delete them. There is no automatic inactivity-deletion schedule. From My tutoring account, you can download your profile and saved work or permanently delete this account and its linked progress after entering your current password. The guarded deletion transaction does not affect school or family accounts.

School and parent-managed home records

These records have a separate authorized review process; the personal tutoring delete button does not apply to them. For school records, the administrator records each class’s retention basis, disposition instructions, and next review date. Missing or expired authorization/review records prevent new school enrollment. The date prompts review, not automatic deletion. Home consent withdrawal stops further learning access and revokes sessions; it does not immediately delete existing records.

Review and preservation

When the educational purpose ends or a review is due, check school decisions, outstanding access requests, preservation holds, and applicable requirements. Use Student records and requests for access, correction, and deletion review. Holds block school/home account deletion. A request alone does not authorize deletion or replace identity verification.

Controlled school/home deletion

An authorized administrator verifies the request, records an authorization reference, re-enters their password, and confirms the student ID. Linked academic work and account records are deleted through the controlled database workflow. Minimal administrative event records remain and need an approved retention schedule. Older unlinked guest-game records require separate review.

Operational data and deletion limits

Authentication rate-limit counters expire and are cleaned up by later authentication requests after expiry plus one day; this is not a scheduled cleanup job. Feedback, request records, and administrative events need separate retention review. Account deletion does not erase earlier downloads or establish removal from provider backups and service logs. Provider retention and backup-deletion timelines have not been verified. No automatic end-of-year purge, zero-retention guarantee, or provider deletion deadline is promised.