Data Retention Policy

1. How Long We Keep Your Data

This policy says how long we keep each kind of data and what happens when that time is up. What we collect, and why, is in our Privacy Policy.

2. Data Types & Retention Periods

Player profiles

Retention. Until you delete the profile or your account

After expiry. Account deletion hides profiles immediately; once the 48-hour recovery window closes, we begin permanently deleting everything and keep going until it's gone; nothing can be recovered

Photos & videos

Retention. Until removed by the uploader or your account is deleted

After expiry. When you remove a photo or video from a team gallery, it is hidden right away for anyone online, and within a day on a phone that has been offline since. It is permanently deleted from our storage within 90 days. If you delete your account, profiles are hidden immediately and their deletion begins once the 48-hour recovery window closes. A photo or video shared from your private gallery stays there when you take it out of the team gallery. Video uploads that never finish are removed after 48 hours. A copy a provider keeps for backup, legal, or security reasons may remain after our active copy is gone. We do not publish a date when every copy is gone

Videos that fail the safety check

Retention. About 30 days

After expiry. Hidden straight away and never shown to anyone. The file is kept for about 30 days in case you ask us about it, then deleted from our active storage. A copy a provider keeps for backup, legal, or security reasons may remain after our active copy is gone

Game statistics & milestones

Retention. Until profile or account deletion

After expiry. Permanently purged with the profile

Profile view records

Retention. 90 days

After expiry. Deleted. Views are recorded as anonymous codes that change every day, never as raw IP addresses

Security & audit logs

Retention. 90 days

After expiry. Deleted

Email delivery records

Retention. 90 days · 2 years for consent emails

After expiry. Deleted, except for the family update records listed below. Anything linked to your account goes when you delete the account, and anything else clears on the schedule above. We keep whether each email reached you, never a copy of what it said. Your address is stored as a one-way code rather than the address itself, along with the part after the @ so we can spot a mail provider blocking us. Our emails carry no tracking pixel, so we cannot tell whether you opened one

Family update settings & delivery records

Retention. Until account deletion · provider details removed after 90 days

After expiry. Deleted with your account. We keep your email choice, basic delivery history and unsubscribe codes. These codes keep older unsubscribe links working. We also remember photos and videos already considered for these emails. References to removed photos, videos or follows are deleted later. These records contain no photos, videos, names or captions

Private family stories & recipients

Retention. Story links: 30 days · saved recipients and story records: while your account is active

After expiry. A story link stops working after 30 days. It may stop sooner if you remove the recipient, the approved story is no longer available, you turn off AI story consent, or a selected photo or video changes, is unpublished, or is held by a safety check. In some older game stories, an unavailable moment may instead be withheld while the rest remains available. Saved recipient details, approved story records, and protected link and opt-out history are deleted with your account

Encouragement messages

Retention. Approved: archived after 12 months · Declined: deleted after 30 days

After expiry. Declined messages are permanently removed

Incomplete profiles (consent never finished)

Retention. 14 days

After expiry. Deleted automatically. We email you reminders before then so you can finish setting up first

Data exports

Retention. 45 days after generation

After expiry. Export file deleted from storage

Consent records

Retention. Kept for legal compliance while your account exists

After expiry. Removed when your account is permanently deleted; revoked consents are marked and kept as an audit trail until then

Support & contact messages

Retention. Support requests: 6 months after resolution (90 days if sent signed-out, 12 months at the latest) · Contact-form messages: 1 year

After expiry. Database records deleted; mailbox copies of support email kept up to 12 months. After you delete your account we keep a record that an account at that address was removed, for 30 days. After we close an account for a Terms breach we keep a hashed record of that address for 2 years so a new account cannot be opened with it; we do not keep the address itself

AI recap, game-story & caption drafts (opted-in children only)

Retention. While you have this turned on for that child

After expiry. Deleted, along with their inputs, when the parent turns the feature off

3. Data Lifecycle Overview

How your data moves through different stages based on your account status:

Active Data (While Your Account Is Open)

Photos, videos, and stats: kept until you remove them
You can delete any item, profile, or the whole account at any time
Privacy settings apply immediately when you change them

Trial Expiry (Plan Ends)

Nothing is deleted. Your account returns to the free plan
Your private family gallery stays exactly as it was
We never auto-charge when a trial ends

Consent Revocation

Collection stops and the profile is hidden immediately
Once 48 hours have passed, we begin permanently deleting the profile’s data and keep going until it’s gone
Consent audit records: kept as required by law

Account Deletion

Profiles are hidden immediately; a 48-hour recovery window lets you change your mind by signing back in
Once the window closes, we begin permanently deleting all your data from our database and photo storage, and keep going until it’s gone
If we close an account because it broke our Terms, there is no 48-hour window
We then keep a hashed record of that address for 2 years so a new account cannot be opened with it. We do not keep the address itself
Teams you own are handed to another team member so other families’ photos survive

4. Service Provider Data Retention

Providers handle information under their agreements and applicable retention rules. Retention differs by service and by the type of record. Some records remain for security, fraud prevention or legal compliance. The periods below distinguish our records from copies providers retain.

Media Storage & Delivery

When you remove a photo or video from a team gallery, it is hidden right away for anyone online, and within a day on a phone that already has it. It is deleted from our storage within 90 days. A photo or video shared from your private gallery stays there when you take it out of the team gallery. A copy a provider keeps for backup, legal, or security reasons may remain after our active copy is gone. We do not publish a date when every copy is gone.

Video Processing Provider

Video files are removed from active processing when you delete the video, and about 30 days after a video failed the safety check. A copy a provider keeps for backup, legal, or security reasons may remain after our active copy is gone.

Payment Processor

ClutchSnap stores only billing references, never card numbers. Our payment processor keeps its own payment, fraud, and legal records under its own obligations. Those records are not erased just because a ClutchSnap account is deleted.

Email Delivery Provider

Our email provider normally retains email content and delivery logs for 30 days. Backup copies follow a separate seven-day retention schedule. These are published defaults, not a universal ceiling. Our own hashed delivery records follow the Email delivery records schedule above.

Safety checks

Safety checks process photos, selected video images and speech transcripts. Our safety provider doesn't routinely retain those inputs or its results. We keep our own safety records under our Data Retention Policy.

Optional AI writing

Our writing provider normally deletes submitted and generated text within 30 days. Content flagged for policy violations may remain for up to two years. Related safety classifications may remain for up to seven years. Legal obligations or investigations of misuse may require longer retention.

5. How to Request Deletion

You can delete your child's data at any time through your account settings. Deletion options include:

Revoke consent: stops collection and hides the profile straight away. After 48 hours we begin permanently deleting the profile's data
Delete profile: removes everything tied to that player profile
Delete account: hides everything straight away, and begins permanently deleting your account and every profile once the 48-hour recovery window closes

Go to Account Settings

6. Data Privacy Requests

For data privacy requests, questions about your data, or to exercise your rights as a parent or under state privacy laws:

This data retention policy is written to the standard of the Children's Online Privacy Protection Act (COPPA) 2025 amendments, which we apply by choice, and in compliance with applicable state privacy laws. For full details, see our Privacy Policy.