How long we keep your data

While your account is open

We keep what you put in for as long as your account is open. Delete an entry, a file, a Family Profile or an AI Within conversation and it leaves the live service at once. AI Within conversations with no activity for 365 days are deleted automatically.

When you close your account

• Straight away — you're signed out, you can't sign in, and any website subscription is cancelled. Nothing is deleted yet.
• For 30 days — you can reopen your account and everything is still there.
• After 30 days — your profile, life areas, Feed Within, Family Profiles, To Do and One Thing, gratitude history, Within Drive files, card records, AI conversations and memories are permanently deleted within 7 days. Your record with our payment provider is anonymised.
• Within a further 14 days — the copies in our backups expire. The database's own backups roll over within 7 days; the daily copies of AI Within's memory store and of our server disks are kept no longer than 14 days.

• Straight away — you're signed out and you can't sign in. A subscription in the App StoreGoogle Playyour app store is not cancelled by closing; cancel it there first. Nothing is deleted yet.
• For 30 days — you can reopen your account and everything is still there.
• After 30 days — your profile, life areas, Feed Within, Family Profiles, To Do and One Thing, gratitude history, Within Drive files, card records, AI conversations and memories are permanently deleted within 7 days. Your record with our payment provider is anonymised.
• Within a further 14 days — the copies in our backups expire. The database's own backups roll over within 7 days; the daily copies of AI Within's memory store and of our server disks are kept no longer than 14 days.

What remains, and for how long

• Billing and tax records (invoices, amounts, dates, plan history) — 7 years, as tax and accounting law requires, without your name or email address.
• Legal acceptance records (which Terms and Privacy Policy version you accepted, when, from which IP address) — 7 years.
• Guardian consent and "new chapter" invitation records for a Family Profile — 7 years, without the child's name, date of birth or content.
• A one-way fingerprint of your email address — 1 year, only to prevent refund and promotion abuse. It cannot be turned back into your address, and the same email can sign up again.
• Your leaving reason, if you gave one — kept with no link to you.
• Security and application logs, and sign-in rate-limit records — up to 30 days.
• Sampled AI monitoring traces — up to 14 days.
• Reports you made about an AI response — 12 months, unlinked from you.
• Our staff's audit log (actions taken on accounts, ids only) — 2 years.
• A record that your account was deleted (dates and the steps completed) — kept, with no name, email address or content.
• De-identified usage statistics — kept, with no personal information. This includes the product events described in our Privacy Policy, with your account identifier removed.
• Your email address, only if you ticked "Keep me posted" — until you unsubscribe.