Nothing we hold is kept for longer than we have a reason to keep it. A job runs once a day and deletes whatever has passed its time, and every run is written to our records so there is evidence it happened.
The main periods
| What | How long we keep it |
|---|---|
| A removed reader, with their books, pictures, drawings, reading checks and listening | 30 days after you remove them |
| A closed account and everything in it, including the sign-in | 30 days after you close it |
| A recording you made of yourself reading a book | As long as the book is kept; it goes 30 days after you remove the reader |
| A link you made to share a report card | 30 days after you make it. Turning it off stops the link at once. |
| Your child's signed-in sessions | 30 days after each one ends |
| Records of books being made, and what they cost | 90 days |
| Payment events from our payment provider | 90 days |
| A record of each email we sent you | 90 days |
| A record that your child asked Pip something, without their words | 90 days |
| Records of our safety checks, which can include your child's words | 90 days; anything still waiting for a person is kept until someone has looked at it |
| The individual moments behind the estimate of which books suit your child, if learning is on | 90 days, and deleted at once if you turn learning off |
| Safety alerts we sent you, with your child's words where a check objected | A year |
| Counts of what happened on the grown-ups' pages | 400 days |
| Your child's weeks on the weekly board | 8 weeks |
| The words of a comment that our staff, or reports from other families, took down | 30 days; the record that the comment existed goes after 90 days |
| Reports about a shared book or a comment | 90 days after they are dealt with |
Kept while your child is on the account
These go when you remove the reader, after the usual 30 days:
- the words your child has met in their books, and numbers about how their reading aloud went
- when they moved to a different age group
- their reader name and its picture, the hearts and "Not for me" they pressed, and the comments they wrote, unless a comment is taken down first
Your agreements, and the record of what was done with them, go only when the whole account goes, because they are the evidence that we asked your permission.
Never kept at all
- A recording of your child's voice, whether they are talking to Pip or reading a page aloud
- The words your child says while reading a page aloud
- A comment that was refused because it held something that could identify or reach a person. We keep only a note of what kind of detail it was.
- Your card details, which stay with our payment provider. We keep only a one-way fingerprint of the card.
Removing a reader or closing your account
Nothing is deleted on the day. The reader or account is marked, disappears from the app, and is deleted 30 days later. After that it cannot be brought back.
- To undo removing a reader within the 30 days, get in touch with us. See Removing a reader.
- To undo closing your account, sign in before the 30 days are up. A closed account opens "Close your account" and no other page, and "Keep my account" is there. See Closing your account.
- Closing an account stops its plan with it, so there is nothing to cancel first; see Closing your account.
Quiet accounts
An account with no readers on it that nobody has signed in to for a long time is written to before anything happens. The email says how many days you have. If nobody signs in by then, the account and everything in it are removed. Signing in once stops the clock. The current periods are on the retention page, and Quiet accounts says more.
When something must be kept longer
Very rarely, the law requires us to keep something past its usual time, for example for a report we are obliged to make. When that happens, the daily job leaves what is covered in place until the requirement ends.
The full policy, with every line, is on the retention page.
If you have a question about any of this, write to privacy@taletykes.com.