Data Retention
| Data | Kept for | Then |
|---|---|---|
| Account (email, display name, credentials) | Life of the account | Erased immediately on account deletion |
| Items you track (subscriptions, bills, trials, notes, decisions, Worth-It history, categories, payment records) | Life of the account — you can delete any item at any time | Erased immediately on account deletion |
| Notification & digest preferences | Life of the account | Erased immediately on account deletion |
| Locally scheduled reminders | On your device only | Removed when you sign out, delete items, or uninstall |
| Encrypted database backups | Rolling window | Deleted data ages out automatically within 30 days |
| Deletion audit record (anonymous ID + timestamp) | Up to 12 months | Purged |
| Support emails | Up to 24 months after resolution | Deleted |
| Website server logs (Vercel operational logs, no personal content) | Short-lived (provider standard) | Rotated automatically |
What "deletion" means here
When you delete your account, the deletion runs at the database level: your user record is destroyed and every row that belongs to it is removed in the same operation by enforced cascading rules — not by a background clean-up job that might be forgotten.
Questions about retention: privacy@duelynoted.app.