Data Retention Schedule
Last updated July 2026
We keep what the service needs to work, for as long as it is needed, and no longer. This page states the actual periods rather than a general assurance.
| What | How long | What happens then |
|---|---|---|
| Account and profile (name, email, date of birth, photo) | While the account is active | Deleted 30 days after a deletion request |
| Academic records (courses, grades, GPA, marking periods) | While the account is active | Deleted with the account. Where a district placed the data, deleted on district instruction |
| Practice tests, Sport IQ, evaluations, resumes, essays | While the account is active | Deleted with the account |
| Consent records | While the account is active, plus the deletion grace period | Deleted with the account; included in your export beforehand |
| Sign-in and account-activity history | 24 months | Rolled off automatically |
| Email delivery log (what we sent, and whether it opened) | 24 months | Rolled off automatically |
| Profile access events (which recruiter viewed a profile, and when) | While the account is active | Deleted with the account |
| Financial records of payments | 7 years, as tax and chargeback rules require | Retained without the link to a person — transaction kept, identity removed |
| Administrative audit log (staff actions on accounts) | 24 months | Rolled off automatically |
| Backups | Rolling 30 days | Overwritten. Deleted records disappear from backups within that window |
How deletion actually works
Requesting deletion starts a 30-day grace period. The delay is deliberate: it makes an impulsive click, or one made by somebody who should not have had access to the account, reversible. You can cancel at any point during those 30 days from Settings → Privacy & data.
When the period ends, the account is erased. Deletion cascades through every table holding records tied to that person, so nothing is left orphaned. The one exception is financial records, which tax and chargeback rules require us to keep — those are separated from the person first, so what remains is a transaction with no identity attached.
Accounts placed by a school or district
Where a district is the party that placed student data with us, the district directs retention and deletion. We act on their instruction and delete on request, including at the end of a contract.
Getting a copy first
Deletion is permanent. Export your data before you start it — Settings → Privacy & data → Export my data produces a complete file of everything we hold, including the records listed above.
Related: subprocessors · Parents' Bill of Rights · Privacy Policy