How long we keep things
- Parent / teacher account — kept while you're using MathBuns. After 24 months without signing in, we delete it.
- Child profile + practice data — kept while the child account exists. Deleted within seconds of the parent removing the child or deleting their own account.
- Billing records (invoices, Stripe customer ID) — 7 years from the end of the accounting year, because UK tax law (HMRC) requires it.
- Server access logs — 30 days, then automatically rotated.
- Backup snapshots — up to 7 days. When you ask us to delete you, we wipe the live database immediately, but the row may persist in a daily backup for up to a week before it ages out. We will never restore those backups to live without re-applying your deletion.
Asking us to delete sooner
You don't need a reason. Two ways:
- Self-serve: sign in, go to Settings → Account → Delete account. Cascades to every child profile and all practice data.
- Email: privacy@mathbuns.com — we'll respond within 30 days, usually much sooner.
Asking us for a copy
UK GDPR gives you the right to a copy of your data. Sign in and visit /api/account/export for a JSON export, or email us. For a child's data, the parent emails us — we'll verify the parent relationship before sending.
Changing this page
We'll email parents about any meaningful change at least 14 days before it takes effect. The full privacy notice lives at /privacy.