Data Retention Policy

Last Updated: July 22, 2026•Version 1.0

KidProsper Data Retention Policy

Version: 1.0

Effective Date: July 21, 2026

Last Updated: July 21, 2026

Status: APPROVED FOR LEGAL REVIEW

Owner: KidProsper Compliance Engine (KCE)

Welcome to the KidProsper Data Retention Policy. In accordance with global data protection principles—specifically data minimization and storage limitation—KidProsper does not retain personal information indefinitely.

This policy establishes strict, automated retention schedules for all data processed by the KidProsper Intelligence Engine (KIE), KidProsper Compliance Engine (KCE), and the platform's active servers.

1. Core Retention Principle

KidProsper retains personal and developmental information only for as long as necessary to fulfill the purposes for which it was collected, to provide the Services, to maintain legal compliance, and to resolve disputes. Once data is no longer necessary for these operational purposes, it is securely deleted, anonymized, or purged.

2. Standard Data Retention Schedule

During normal operations (while a parent account and child profile remain active), data is retained according to the following schedule:

Data Category

Retention Period

Operational Purpose

Parent Account Profile

Until account deletion

To maintain authentication, subscription status, and user settings.

Child Profile Data

Until profile or account deletion

To contextualize developmental standards, KP Scores, and Growth Blueprints.

Assessment Responses

Until profile or account deletion

To calculate ongoing developmental parameters and drive the KIE intelligence loops.

Growth Blueprints & KP Scores

Until profile or account deletion

To provide parents with continuous historical trend analysis and progress tracking.

Activities & Habits History

Until profile or account deletion

To track daily engagement and feed data into Weekly Growth Meetings.

KidProsper AI Coach Chats

Up to 12 months (rolling)

To maintain conversational context with the AI assistant; automatically purged after 12 months.

KCE Consent Logs

7 years from creation

To maintain immutable proof of legal compliance, policy versions, and parental consent timestamps.

Platform Audit Logs

7 years from event

To record critical security events, data requests, and administrative actions for audits.

Billing & Transaction Records

7 years from transaction

To comply with global tax, financial, and accounting legal requirements.

3. Inactive Accounts and Dormant Profiles

  • Dormant Parent Accounts: If a parent account exhibits zero activity or logins for a consecutive period of twenty-four (24) months, KidProsper will send a notification email regarding account dormancy. If no action is taken within 30 days of notice, the account and all associated child profiles will automatically transition into a 30-day soft delete grace period, followed by a permanent Hard Purge.

  • Child Profiles Without Activity: Child profiles that have been created but left unassessed or inactive for over 12 months may be archived or purged following proactive notification to the parent.

4. Interaction with the Data Deletion Policy

When a parent explicitly requests the deletion of a child profile or parent account (via the Parental Dashboard or email request), the data enters our standard 30-day Soft Delete grace period, immediately followed by a permanent Hard Purge, overriding the standard retention schedules listed above (with the legal exceptions noted below).

5. Backup Retention (Disaster Recovery)

Encrypted disaster recovery backups are retained on a rolling ninety (90) day basis and are automatically overwritten. KidProsper does not actively process information contained within backup archives except as necessary for disaster recovery and business continuity purposes.

6. Anonymization and Aggregation

Where feasible, KidProsper may anonymize or aggregate information for statistical, research, product improvement, and security purposes in a manner that does not reasonably identify an individual child or parent.

7. AI Training Clarification

Child information and AI conversation histories are not retained indefinitely for purposes of training publicly available or third-party foundational artificial intelligence models.

8. Legal & Regulatory Retention Exceptions

Certain categories of data are exempt from routine deletion schedules. KidProsper reserves the right to retain specific records beyond their standard timelines if required by:

  • Formal court orders, legal proceedings, or active litigation holds.

  • Government or regulatory inquiries.

  • Fraud prevention, security incident analysis, or enforcement of our Terms of Service.

Retained compliance records (such as KCE consent logs and audit trails) are securely isolated, restricted via role-based access controls, and used exclusively for legal defense or regulatory audits.

9. KCE Internal Auditability and Lifecycle Tracking

To demonstrate mature governance and compliance with global privacy standards, the KidProsper Compliance Engine (KCE) immutably tracks and logs every data lifecycle event. For every record, KCE maintains:

  • Created At

  • Last Accessed

  • Scheduled Deletion

  • Purged At

  • Purge Status

10. Automated Enforcement via KCE

KCE automates this retention policy. KCE runs scheduled background scripts that identify expired data categories (such as AI chat histories older than 12 months or consent logs past their legal window) and executes secure, automated database purges without requiring manual intervention.

11. Retention Schedule Review

KidProsper periodically reviews its retention schedules (at least annually) to ensure continued alignment with legal requirements, business needs, and industry best practices.

12. Contact Us

If you have questions regarding this Data Retention Policy or wish to inquire about how long specific information is stored, please contact our Compliance Team:

Email: compliance@kidprosper.com

Website: www.kidprosper.com