We keep account information, conversations, coaching memory, and other saved product data while your account is active to provide the Services. AI reports and internal review notes remain linked to your account and are removed when that account is deleted. Contact us if you want to request deletion of particular information while keeping your account.
We retain technical AI diagnostic records for 30 days and run a daily cleanup of older records. Records can remain until the next successful cleanup. These records contain technical fields such as timing, token counts, error status, and an account identifier for deletion. They exclude prompt and response text, photos, tool payloads, and free-text health details. Our Vercel application runtime logs have a 30-day retention period.
Completed account deletion removes associated product records, coaching memory, AI reports, and linked AI diagnostics from active systems. Deletion can require reauthentication or an email verification step, and a failed request may need to be retried. We generally complete verified support-assisted deletion requests within 30 days, subject to applicable legal requirements.
Our production Neon database has a six-hour recovery-history window. A deleted database record may remain recoverable within that window. Runtime logs expire on their separate schedule. These periods do not describe records held independently by a connected service or payment provider.
We retain limited deletion records, including hashed account identifiers and deletion status, to prevent stale sessions or delayed requests from recreating deleted data and to document completion. These records can remain after account deletion and do not contain your coaching conversations or health records. We may also retain records needed for legal obligations, security investigations, billing, or disputes for as long as that purpose requires.
We use administrative, technical, and organizational safeguards designed to protect information, including access controls, encryption in transit using modern cryptography, and encryption or equivalent protections for sensitive stored credentials. No method of storage or transmission is completely secure.