Data retention policy
Last updated: 26 September 2026 · Version 2.0
WonderPath ("we", "us", "our") is committed to retaining personal data only for as long as it is needed. This policy sets out exactly how long we keep each type of data, how you can export your data, and how the deletion process works. It is operated by Clove9, whose business address is Office 128, 18 Young Street, Unit LGE, Edinburgh, EH2 4JB, Scotland, United Kingdom. This policy should be read alongside our Privacy Policy.
1. Retention periods
The table below sets out the retention period for each category of data we hold.
| Data type | Retention period | Notes |
|---|---|---|
| Account data (parent email, hashed password, display name, consent records) | While account is active + 30 days after deletion | The 30-day period allows for account recovery during the cooling-off window |
| Learning records (lessons completed, scores, mastery levels, XP, streaks, badges, certificates) | While account is active | Deleted when the parent removes the child profile or closes the account |
| AI conversations (tutor chat history) | While account is active | Visible to parents at all times; parents can delete individual conversations |
| Journal entries | While account is active | Deleted when the parent removes the child profile or closes the account |
| Wellbeing check-ins | While account is active | Deleted when the parent removes the child profile or closes the account |
| Audit logs (security events, account actions, moderation flags) | 12 months | Retained for security, compliance and safeguarding purposes |
| Client error logs (browser errors, crash reports) | 90 days | Used for debugging and service reliability; purged on the monthly review |
| Email send logs (transactional email records) | 6 months | Used to verify delivery and troubleshoot email issues |
| Payment records (transaction IDs, amounts, dates, VAT records) | 7 years | Legal requirement under UK tax and accounting law (HMRC) |
2. Data export rights
Under the UK General Data Protection Regulation, you have the right to receive a copy of your personal data in a structured, commonly used and machine-readable format (the right to data portability). We make this straightforward:
- Parents can export all data held about their account and their children at any time from the parent dashboard.
- The export includes account information, child profiles, learning records, AI conversations, journal entries, wellbeing check-ins, badges, certificates and progress data.
- Data is exported in JSON format, which can be opened by most data tools and applications.
- There is no charge for data exports and no limit on the number of times you may export.
- If you prefer, you may request a data export by emailing info@wonderpath.co.uk. We will respond within one calendar month, in accordance with UK GDPR.
3. Data deletion process
When a parent requests deletion of their account or a child profile, the following process applies:
- Request. The parent initiates deletion from the parent dashboard or by emailing info@wonderpath.co.uk.
- Cooling-off period. A seven-day cooling-off period begins. The parent may cancel the deletion request during this period from the same screen or by contacting us.
- Permanent deletion. After the cooling-off period the parent can complete the deletion with one tap on the same screen, and we complete any request that is still waiting by hand. Either way, the data is permanently deleted from our production systems within thirty days of the request, except for data we are legally required to retain (see the retention periods table above).
- Backup purge. Data in encrypted backups is overwritten as part of the normal backup rotation cycle, which completes within ninety days of the deletion request.
- Confirmation. The request shows as completed on the parent's privacy screen. During the beta we confirm by email only for requests we complete by hand.
- Closing the whole account. Email info@wonderpath.co.uk with the subject "Close my account". We confirm within two working days and complete it within thirty days.
4. How retention periods are enforced
During the beta, log purges (error logs after ninety days, email logs after six months, audit logs after twelve months) are run by a person on a monthly review, and each run is recorded in the audit log. Scheduled jobs that do this automatically are on the beta list; when they are live we will say so here and on the Beta page.
5. Data retained after account deletion
After an account is deleted, the following data may be retained for the periods stated:
- Payment records are retained for seven years as required by UK tax and accounting law.
- Safeguarding records, where a safeguarding concern was raised during the life of the account, are retained in accordance with statutory guidance and may be shared with relevant authorities.
- All other data is permanently deleted in accordance with the process described in section 3.
6. Changes to this policy
Where we make a material change to this policy, we shall notify the parent by email and through a banner on the parent dashboard at least fourteen days before the change takes effect. The version number and date at the top of this page reflect the latest version.
7. Contact
For data export requests, deletion requests or questions about data retention, please contact us at info@wonderpath.co.uk. You may also write to us at: Clove9, Office 128, 18 Young Street, Unit LGE, Edinburgh, EH2 4JB, Scotland, United Kingdom. We aim to respond within seven working days and in any event within one calendar month, in accordance with UK GDPR.