How long we keep data
Part of the ClassGuard Privacy Policy. Version 2026-10. Deletion runs automatically every hour or every night; nobody has to remember to do it.
Children's class activity
| Data | Kept for |
|---|---|
| Focus scores per minute, distraction details, focus alerts | 90 days |
| Join and leave times, camera/microphone connection checks | 90 days |
| Class chat messages, polls and votes | 90 days |
| Phone and lock events, tamper warnings, PIN exits, commands sent to the phone, pre-class phone checks | 90 days |
| Teacher focus reminders about a student | 90 days |
| Weekly and monthly reports | 1 year |
| Attendance and the per-class focus percentage | 1 year after the class |
| Handed-in homework (files and photos) and marks | 1 year after hand-in |
| Teacher notes about a student | 1 year |
| Focus Stars earned per class | 1 year (totals, streaks and badges stay while the account exists) |
| Finished checklist tasks | 30 days after being ticked |
Accounts and safety
| Data | Kept for |
|---|---|
| Account details (name, email, school, class) | While the account exists |
| Parent consent records | While the child's account exists (proof of what was agreed) |
| Phones that were removed from an account | 90 days after removal |
| One-time pairing codes | 7 days after use or expiry |
| Fingerprint sign-in challenges | 1 day after expiry |
| Invitations (they contain email addresses) | 30 days after accepted, cancelled or expired |
| School admin action log | 1 year |
| Alert delivery tokens for phones/browsers | Removed when unused for 90 days |
| In-app notifications | 90 days |
| Notification delivery records | 30 days |
| Help requests | Closed after 14 days without activity; pictures deleted 90 days after closing; the request deleted 1 year after closing |
| Emails we sent (copy for troubleshooting) | 7 days |
| Printed login sheets for students | Deleted automatically when they expire |
| Crash reports and server error records | 30 days |
| IP addresses used for rate limits | Up to 1 day |
| Record that an account was deleted (no personal details) | 1 year |
Schools
| Data | Kept for |
|---|---|
| Invoices and billing records | As long as the law requires us to keep accounting records |
| Class schedules | 1 year after the class |
When an account is deleted
The account is switched off immediately. Our automatic clean-up (it runs every hour) erases its data, files and pictures. Cloudflare's database backups keep a copy for up to 30 days, after which it is gone everywhere. If a parent deletes a family account, the children's accounts in that family are erased too. If the child belongs to a school, the parent's link is removed and the school keeps its own records under its own policy.