Privacy
Data Retention Policy
We keep data only as long as it is needed for the purpose it was collected for, then delete it. Deletion runs every day.
What we keep, and for how long
| Data | Why we keep it | How long | Then |
|---|---|---|---|
| Student logins a school creates (name + pictures, roster upload) | Let the student sign in to their class | 60 days after the student is in no active class, or at once when the school deletes them | Account and everything it holds deleted |
| A school’s classes, assignments, results and student logins | Provide the school’s typing lessons and reports | 60 days after the school’s plan ends, or at once when the school asks | Deleted; the school receives a deletion certificate |
| Reports of archived classes, for students with their own account | Let teachers look back at past years | 3 years after the class is archived | Class membership, submissions and messages deleted; the student’s own account stays theirs |
| Child accounts (kids mode) | Provide the child’s lessons to the parent | Until the parent deletes the child or their own account | Deleted at once, with all results |
| Typing results of adults | Show your progress and records | Until you delete your account | Deleted with the account |
| Sign-in sessions (IP address, city, browser) | Security and “signed in on” lists | 13 months | Deleted |
| Notifications and teacher nudges | Tell teachers and students what needs attention | 180 days | Deleted |
| Requests to join a class, retired join codes | Approvals and old printed cards | 365 days after they are decided or retired | Deleted |
| Site usage records (pages, events) | See what helps people learn | 13 months in detail, 3 years as a visit summary; never for children or students | Deleted |
| Sign-in rate-limit counters | Stop abuse of sign-in pages | 1 day | Deleted |
| Billing records (adults and schools only) | Tax and accounting law | As long as the law requires | Kept by Stripe and in our order records; never student data |
Backups
Our database provider keeps encrypted backups for a short period for disaster recovery. Deleted data leaves the backups when they expire.
Version 2026-10-24. Questions: info@thetypingcat.com. See also the privacy policy.