Legal Document
This policy explains how long we keep different types of information and what happens to your data over time. We follow the principle of data minimisation, keeping data only for as long as needed for its intended purpose.
1.1 We only collect information needed to provide the service.
1.2 Retention periods are set based on legal requirements, educational needs, and your account status.
1.3 We review retention periods regularly and reduce them where we can.
2.1 Active accounts:
Basic profile data is kept while your account is active.
Authentication and login history is kept for up to 12 months.
Account preferences are kept for the lifetime of the account.
2.2 Inactive accounts:
We email you a reminder after 6 months of inactivity.
We email you a warning a month before deletion, so you can sign in to keep the account or download your data first.
Accounts are deleted after 12 months of inactivity. Signing in at any point resets the clock.
3.1 Study progress (XP, streaks, learning path completion, league position) is kept for the lifetime of your account.
3.2 Quiz responses and lesson interactions are kept for the lifetime of your account so we can show your historical progress.
3.3 Exam-question annotations, marks and AI feedback are kept for the lifetime of your account.
3.4 Older performance data may be aggregated and anonymised for service improvement after 24 months.
4.1 AI tutor conversations are not retained by default.
4.2 Safeguarding-flagged conversations are retained for up to 24 months for review and audit, and may be disclosed to schools or authorities where appropriate.
4.3 Chat-uploaded files (images, PDFs, documents pasted into a conversation) are retained for up to 30 days and then cleaned up automatically.
4.4 My Genies knowledge-base files are retained until you delete the file or delete the genie.
5.1 AI memory notes are kept until you delete them (or for the lifetime of your account).
5.2 We cap the number of memory notes per subject and per user; older notes are evicted automatically as new ones are added.
6.1 Support tickets and replies: kept for up to 24 months after the ticket is resolved.
6.2 Service emails (account, billing, reminders): a log of send events is kept for up to 12 months for audit purposes; the email content itself is generated at send time and not separately stored.
6.3 User feedback (thumbs up/down on messages, feature feedback): kept for up to 24 months.
6.4 Push notification devices: the address and keys needed to reach one browser are kept for as long as that browser stays subscribed. The record is deleted as soon as the user switches push notifications off, signs out on that device, or deletes their account, and as soon as the push service reports that the device no longer exists. There is no fixed period and nothing is kept afterwards.
7.1 Application access logs: up to 30 days.
7.2 Error and security logs: up to 12 months.
7.3 Aggregated, anonymised usage statistics: may be retained indefinitely.
8.1 Payment metadata (Stripe customer reference, subscription/payment references, invoices) is retained for at least 7 years to meet UK accounting and tax requirements.
8.2 We do not store full card numbers - card data is held by Stripe under PCI DSS.
9.1 Under-18 users: data is treated with privacy-protective defaults and the same minimisation rules above; we err on the side of shorter retention where possible. For students who register as under 16 we do not store approximate location on the account at all, so there is nothing there to retain.
9.2 Safeguarding records: as set out above, we may retain longer where there is a safeguarding need or legal obligation.
10.1 When you delete your account, we operate a 2-day cooling-off period and then anonymise the account, deleting personal data. Financial records and certain anonymised safeguarding records may be retained where law requires.
10.2 You can request earlier deletion of specific data (e.g. a chat file, a memory note, a custom genie) at any time.
To request data deletion, an export, or to ask about retention periods, please contact our Data Protection Officer, Joel Martin, at joel@revisiongenie.com. For more on how we handle your data, see our Privacy Policy and Children's Code Compliance pages.