Data Retention Policy
Effective date: to be set on launch
This page explains what data Zensus holds, why we hold it, and how long we keep it. It also explains what happens to your data when you close your account. This document is informational — refer to our Privacy Policy for the full legal basis for data processing.
1. Why We Retain Data
We retain personal data only for as long as it is needed for the purpose it was collected, or for as long as we are required to keep it by law. Once a retention period expires, data is deleted or irreversibly anonymised.
2. Data We Hold While Your Account Is Active
| Category | What it includes | Retained until |
|---|---|---|
| Account and profile | Email, name, date of birth, country, language, unit preferences | Account deletion |
| Health and nutrition | Food logs, calorie and nutrient records, nutrition targets, macro tracking | Account deletion |
| Activity and exercise | Exercise logs, activity records, cardio and resistance training history | Account deletion |
| Measurements | Body weight, body fat, and other body measurement logs | Account deletion |
| Sleep | Sleep logs and sleep quality records | Account deletion |
| Teams and social | Team membership, team messages, leaderboard entries, community translations | Account deletion |
| Avatars | Avatar selections and purchase history (free claims and purchases) | Account deletion |
| Notification preferences | Push and email notification settings | Account deletion |
| Games and quizzes | Quiz attempts and correctness history | Account deletion |
All data in this table is deleted permanently when your account is closed.
3. What Happens When You Delete Your Account
When you request account deletion in the app (Profile → Account → Delete Account):
- Your account is scheduled for deletion and marked as inactive immediately.
- You have 30 days to change your mind. During this window, your data is not yet deleted and you can cancel the deletion by logging back in.
- After 30 days, all data listed in Section 2 above is permanently and irreversibly deleted from our systems. This cannot be undone.
- You will receive a confirmation email when deletion is complete.
4. Data Retained After Account Deletion
The following records are retained after your account is deleted. They are anonymised — your name and email are removed — but a reference to your former account ID is kept where legally required.
| What | Why | How long |
|---|---|---|
| Consent records | Required under UK GDPR Article 7 to demonstrate you gave informed consent | Indefinitely (anonymised) |
| Marketing opt-out records | Proof of unsubscribe, to comply with anti-spam law | Indefinitely (anonymised) |
| Financial transaction records | Subscription/avatar payments, for tax and financial compliance | 7 years |
| Security audit records | Login history, lockouts, fraud prevention | 3 years |
| Account and privacy audit records | Account creation, consent, deletion records for compliance | 1 year |
| General operational logs | System-level activity not related to your identity | 90 days |
5. Anonymised Contributions
If you contributed a community translation to a health article in the Learn section, your name is removed from that contribution when your account is deleted. The contribution itself may remain visible, attributed to "Community Member".
6. Analytics
We use PostHog for product analytics. When your account is deleted, your analytics profile is also deleted from PostHog. Aggregated, non-personal analytics data (e.g. "100 users logged a meal today") may be retained indefinitely as it cannot be linked to any individual.
7. How to Request Deletion
Delete your account at any time: Profile → Account → Delete Account. Under UK GDPR and EU GDPR, you have the right to request erasure of your personal data. We will respond within 30 days. Note that some data listed in Section 4 above is retained by legal obligation and cannot be erased early.