Data Retention & Purge Schedule
1. Statutory Mandate & Purpose
Pursuant to the FTC Children's Online Privacy Protection Act Rule (16 CFR § 312.10), operators of child-directed and family applications must retain personal information collected from children only for as long as is reasonably necessary to fulfill the purpose for which the information was collected, and must permanently delete such information when no longer needed.
Enkrova enforces automated, programmatic data purging schedules to uphold data minimization and prevent prolonged storage of minor telemetry.
2. Data Retention & Purge Lifecycle
| Data Category | Retention Ceiling | Automated Purge Mechanism | Post-Purge State |
|---|---|---|---|
| Routine Safe Screenshots | 24 Hours | Hourly automated background cron job executing cloud storage object deletion | Permanently deleted from cloud storage and database reference cleared. |
| Raw Scraped Accessibility Text | 48 Hours | Automated database cron: DELETE FROM logs WHERE created_at < NOW() - INTERVAL '48 hours' |
Permanently erased. Zero text content remains in active logs. |
| Safety Alert Raw Text | 48 Hours | Automated database cron: UPDATE alerts SET raw_content = NULL WHERE created_at < NOW() - INTERVAL '48 hours' |
Raw on-screen text snippet is permanently wiped. Only high-level safety tag and reason remain. |
| Alert Visual Evidence | 7 Days | Automated cron job deleting cloud screenshot objects and zeroing database URL reference | Visual screenshot destroyed; alert record archived without screenshot. |
| Aggregated Screen Time & Daily Balance Scores | 30 Days | Rolling 30-day window for daily usage minutes and Daily Balance scores | Aggregated non-textual minutes per package retained for 30-day trend charts, then aged out. |
| Parent Account & Devices | Duration of active account | Erased promptly upon parent-initiated account deletion | Permanently erased from active systems upon user confirmation. |
| Disaster Recovery Backups | 30 Days | Automated database snapshot rotation | Overwritten automatically after 30 days. Post-restore reconciliation scrubs deletions. |
3. Verifiable Parental Consent (VPC) Retention Exception
When a parent deletes their account, all operational data (parent passwords, child devices, logs, alerts, screenshots, and wellbeing stats) is deleted promptly from active servers. However, pursuant to the FTC COPPA Rule (16 CFR § 312.10) and statutory limitation requirements, the record of Verifiable Parental Consent (signer name, relationship, date/time consent executed, policy version, and timestamp of account deletion) is preserved in a restricted compliance log for 5 years following account termination strictly to demonstrate legal compliance to regulatory authorities (such as the Federal Trade Commission). It contains zero child activity data or passwords and is permanently destroyed upon expiration of the 5-year period.
4. On-Demand Account Deletion
Parents have the right to permanently delete their account and associated family data at any time via:
- Self-Service Web Portal: enkrova.wolfcubventures.com/delete-account (No app installation required).
- Enkrova Parent Mobile App: Settings > Account Security > Delete Account & Data.
5. Disaster Recovery Backup Aging & Reconciliation
Database backup snapshots are maintained for business continuity and disaster recovery on an automated rolling 30-day lifecycle. Backups are encrypted at rest with AES-256 and cannot be individually modified. In the rare event a disaster recovery restore is required, an automated reconciliation script re-executes all deletion requests recorded between the snapshot timestamp and the restore time.
6. Governance & Contact
Questions regarding our retention policies should be directed to:
Email: admin@wolfcubventures.com
Mailing Address: Sandy, UT