Data Retention and Deletion Notice

1. Retention principles

Elo-Kin keeps personal information only while it serves a defined household, service, security, support, or legal purpose. The period depends on the record, user settings, account status, sensitivity, legal requirements, dispute needs, and whether deletion can be completed safely across synchronized devices and backups.

2. User-controlled content

Active tasks, routines, countdowns, journals, logs, media, profiles, and settings generally remain until an authorized user changes, archives, or deletes them or the account or household is deleted. Optional retention settings can archive or delete completed tasks and archive older memories after the period selected by the household. Archives remain available until removed.

3. Recycle Bin and recovery

Supported deleted items move to the household Recycle Bin and remain until an authorized user restores or permanently purges them. Recovery checkpoints are temporary and expire under the configured recovery policy. Local offline recovery data remains on the device until synchronized, discarded, cleared, or removed by browser storage controls.

4. Operational records

Authentication sessions expire according to security settings. Invitations currently expire after seven days. Temporary upload files and unreferenced private media are subject to automated cleanup after a safety window. Notification history may be deleted under the configured notification-retention period. Legal acceptance and child-consent evidence remains with the applicable account or profile while needed to document authorization and is removed through the connected deletion process unless law requires limited preservation.

5. Profile, household, and account deletion

Removing a profile deletes or disconnects profile-owned content according to its permissions and records withdrawal of active child authority where applicable. Household reset and account deletion are restricted to authorized roles. An account owner can schedule deletion with a seven-day cancellation period and export data first. After that period, Elo-Kin attempts transactional database cleanup, private-media deletion, authentication deletion, and session revocation. A failed cleanup remains flagged for retry rather than being reported as complete.

6. Backups and legal exceptions

Residual encrypted or access-restricted copies may remain in provider-managed backups until their normal rotation or disaster-recovery cycle completes. Such copies are not returned to active use except for disaster recovery. We may preserve narrowly limited records when reasonably necessary for security, fraud prevention, a legal hold, compliance, or resolving a dispute, then delete them when that purpose ends.

7. Requests and verification

Use self-service export and deletion controls where possible. For a request through support, we verify the account and, for another person or child, household authority. We will explain a legally permitted exception or appeal path if we cannot fulfill part of a request.