Data Retention Policy

This Data Retention Policy explains how long Baby Flow retains your personal data and when it is deleted. We follow data minimization principles — we only keep data as long as necessary for the purposes described in our Privacy Policy.

While your account is active, we retain all data you've entered, including:

• Baby profile information
• Feeding, sleep, diaper, and activity logs
• Growth records and milestones
• Caregiver invitations and messages
• AI conversation history
• Subscription and billing records

Active accounts: Data is retained while your account remains active.

Inactive accounts: If you don't log in for 24 months, we may send a notification and then anonymize or delete your data.

Deleted accounts: After account deletion, data is permanently removed within 30 days.

Billing records: Financial transaction records are retained for 7 years as required by tax law.

Legal consent records: Retained for the duration of your account plus 3 years for legal compliance.

You can delete your account at any time from Profile → Legal & Privacy → Delete My Account. Upon deletion:

• All baby profiles and tracking data are immediately scheduled for deletion
• Caregiver access is revoked
• AI conversation history is deleted
• Subscription is cancelled
• Permanent deletion is completed within 30 days

You can export a copy of your data at any time from Profile → Legal & Privacy → Export My Data. Your data is provided in a machine-readable format (JSON/CSV) within 30 days of your request.

We maintain encrypted backups for disaster recovery. After account deletion, your data will be removed from active systems within 30 days and from backup systems within 90 days.

We may retain certain data longer than stated above if required by law, regulation, legal process, or to protect our legal rights. Such data is securely stored and access-restricted.

Under GDPR/CCPA, you have the right to request:

• Access to your retained data
• Correction of inaccurate data
• Deletion of your data
• Data portability (export)
• Objection to processing

Data retention questions: privacy@babyflow.app