Data Retention Policy
Overview
This policy describes what information Finley Reading Quest stores, how long each type of record is retained, and how parents can request review or deletion of their child's data. Under COPPA and the FTC's 2025 rule updates, operators may not retain children's personal information longer than reasonably necessary to fulfill the purpose for which it was collected.
Finley adheres to a strict data minimization principle: we collect only what we need to deliver personalized reading instruction, and we delete it when it is no longer needed.
What We Store
| Data Category | Examples | Where Stored |
|---|---|---|
| Parent Account Data | Email, hashed password, billing history, support correspondence | Firebase / Google Cloud (encrypted at rest) |
| Child Learner Profiles | First name or nickname, age range, reading level, skill mastery scores | Firebase / Google Cloud (encrypted at rest) |
| Session Performance Data | Per-session answers, accuracy, response times, BKT mastery probabilities, level progression | Firebase / Google Cloud (encrypted at rest) |
| AI Generation Logs | Anonymized parameters sent to Anthropic (reading level, skill targets, interest tags) | Retained for 30 days for debugging, then deleted |
| Payment Records | Transaction IDs, plan type, billing dates | Stripe (PCI DSS Level 1); Finley stores references only |
| Usage Analytics | Aggregated, de-identified feature usage and crash reports | Cloudflare / internal analytics (no individual child identifiers) |
Retention Windows
| Data Type | Retained While | Deleted After |
|---|---|---|
| Active learner profile and performance data | Account is active and child profile exists | Within 30 days of profile deletion or account closure |
| Parent account data | Account is active | Within 30 days of account closure |
| Billing and transaction records | Required by tax/financial law | 7 years from transaction date (legal minimum) |
| AI generation logs | Debugging window | 30 days, then permanently deleted |
| Aggregated analytics (de-identified) | Useful for product improvement | Indefinite (cannot identify any individual) |
| Support correspondence | Relevant to open issues | 1 year after last communication, then deleted |
We do not retain children's personal information indefinitely. When a parent deletes a child profile, all associated reading performance data, mastery scores, and session history are permanently purged within 30 days.
Deletion Process
Self-Service Deletion:
- Open the Finley parent dashboard (PIN-protected)
- Navigate to your child's profile
- Select "Delete Profile"
- Confirm deletion
This immediately removes the child's profile from the active system. Background purging of all associated records completes within 30 days.
Email Deletion Requests:
Parents may also request deletion by emailing hello@finleyreads.com. Include the email address associated with your Finley account and the first name of the child profile you want deleted. We will confirm receipt within 72 hours and complete deletion within 30 days.
Account Closure:
Closing your entire Finley account deletes all parent data and all child profiles. To close your account, use the account settings page or email hello@finleyreads.com.
What Happens After Deletion
Once deletion is complete:
- The child's name, age, reading level, and all performance data are permanently removed from our databases
- AI generation logs associated with that child's sessions (if any remain within the 30-day debugging window) are purged
- Aggregated, de-identified statistics (e.g., "X% of Level 4 learners mastered CVC blending in Y sessions") are retained because they cannot identify any individual child
- Stripe billing records referencing the parent account are retained for the legally required period but contain no child data
Deletion is irreversible. Exported data should be saved before requesting deletion.
Data Export
Before deleting a child's profile, parents may export their child's reading data from the parent dashboard. The export includes:
- Reading level history and progression timeline
- Skill mastery scores across all phonics and comprehension categories
- Session-by-session performance summaries
- Words mastered and words in progress
Export files are delivered as a downloadable file from the parent dashboard.
Contact
For questions about data retention, deletion requests, or to exercise your rights:
Email: hello@finleyreads.com
We respond to all data-related inquiries within 72 hours.