Data Retention Policy

Effective July 28, 2026

This policy states how long KidSync (operated by Nando Labs LLC) keeps each kind of data and what happens when you delete something.

While your account is active

Your account, family profiles, child profiles, calendar events, favorites, and preferences are kept for as long as your account exists, so the product keeps working for you.

When you delete something

Child removal deletes the child profile and child-only records together; shared events remain for other children and their free text may need review. Account deletion is a saved request that pauses account changes, cancels subscriptions, removes stored calendar credentials and deletes the account and families it owns. Cleanup retries after temporary failures, and the status page confirms completion. Families owned by other parents remain. Copies already delivered to external calendars, messages or other people may remain outside KidSync.

A minimal deletion receipt, containing an account identifier, status and operational timestamps, remains for 30 days after completion so you can check the result. Pending requests retain the information required to finish cleanup; failures require retry or support review.

Backups

Encrypted database backups exist for disaster recovery and roll off automatically within 30 days. Data deleted from the live database is gone from all backups within that window, and backups are never used for any purpose except restoring service after a failure.

Payment records

Our payment processor retains transaction records as required by financial regulations. We keep only the subscription status linked to your account, which is deleted with the account.

Activity catalog

The activity catalog contains public business information about activity providers, not personal information about families, and is refreshed and pruned continuously; stale listings are unpublished automatically.

Emails and logs

Operational logs (like which reminder emails were sent) contain no child data and roll off on a rolling basis. Reminder emails themselves contain activity names and dates, never allergy or medical details.