Account and activity data
Account data, plans, progress, and daily totals are kept while the account is active. Raw listening events are retained for 30 days. Unlock records are kept for their validity period plus 30 days.
Authentication and operational records
Expired authentication metadata is retained for 30 days; email verification rows are purged within 24 hours after expiry. Minimized audit and security events are retained for 12 months.
Deletion
Live account data is deleted or irreversibly de-identified within 30 days of an account-deletion request. Backups expire within 90 days. A minimal completed privacy-request receipt is retained for 24 months; restoration tombstones expire within 90 days.
Exceptions required by law are documented and limited to the affected records. Subscription-provider retention and production backup settings are maintained in our processing records and updated when they change.