Data retention
Draft, pending legal review
This describes how KaizenEDU works today. A lawyer hasn't reviewed it yet, and it will change before KaizenEDU opens to the public.
Draft of October 7, 2026
How long each kind of data is kept: today, and once accounts move to our server. Today's rows are how the app works now. The later rows are a proposal: the people who run KaizenEDU will set them with our lawyer, and this page will change before the move.
Today, in this browser
| What | How long |
|---|---|
| Your account, learners and their record | Until you delete them in Settings, or clear this site's data in your browser. |
| One learner and their record | Until you delete that learner in Settings. |
| The record of hints and help we gave (used for "Is it working?") | The newest 5,000 entries on this device; older ones are dropped. |
| Password reset links | They stop working after 30 minutes. |
| Tutor messages sent to Anthropic | Not kept by us. Anthropic's own policy sets how long it keeps them. |
| Looked-up words and their public answers | Kept for a day by our server, our host's network and your browser, and used for up to a week longer while a fresh copy is fetched. The saved answer doesn't say who asked; our host's request logs do record the request (next row). |
| Requests to our server: IP address, time and page address (a lookup's includes the words looked up) | As long as our host, Vercel, keeps request logs under our plan. Our server's own short memory of IP addresses, used to limit abuse, is cleared when the server restarts or the list fills. |
| Weekly email | On your account in this browser: the email's sending key and the dates it was confirmed and last sent. The key stops working 120 days after it was issued (each email sent renews it), and turning the email off forgets it. Confirmation codes stop working after 2 days. Resend keeps a delivery record under its own policy. |
| Server error records | As long as our host, Vercel, keeps logs under our plan. Names, emails and conversations are left out, and error text is masked, though it can't always be fully cleaned. |
Once accounts are on our server (proposed)
| What | How long |
|---|---|
| Your account and the learning record | While the account is open. Deleting removes it from the live database at once, and from backups on a schedule we'll set and publish here before the move. |
| An account nobody uses | To be decided before the move, with our lawyer. This page will say before it applies, and we'll email you before deleting anything. |
| Parental consent records | As long as the law requires, even after the account is deleted, because they show consent was given. |
| Server logs and backups | To be set before the move and published here. |
Deleting
Settings has "Delete our account and data" for everything, and a delete button for each learner. Today that removes it from this browser at once. With accounts on our server, it will also delete the server copy and ask the services that handled your data (email delivery, and voice when it arrives) to delete theirs.
Contact
Questions or requests about your data: privacy@kaizenedu.net