Data Retention, Export and Deletion — FizzUp

1. Principle

Users can export their data and delete their account. Account deletion is not replaced by merely “freezing” the account.

Independently of account deletion, some data are deleted automatically:

• comparison-task recordings — after 7 days at the latest (checked every hour);
• conversation transcripts and answer text in comparison tasks — after 90 days by default, unless the user chose a different setting;
• live conversation audio is not stored at all.

Coach memory and learning activity are kept until the user deletes them (in privacy settings or by deleting the account). The Privacy Policy, section 5, describes the details and available settings.

2. How to delete an account

FizzUp provides:

1. a readily discoverable account-deletion function in the app;
2. account deletion without the app at fizzup.ai/delete-account: the user enters an email address and we send a link valid for 24 hours to the address of the account; the account is deleted only after confirmation on the FizzUp page (the page does not reveal whether an account with that address exists);
3. the ability to submit a request to privacy@fizzup.ai if the user can access neither the app nor the account's mailbox.

We may require reasonable identity verification to protect the user.

3. What is deleted

After effective account deletion, we delete or irreversibly dissociate from the user, except where continued retention is legally required:

• email address, name, login data and learning-profile data;
• private transcripts and conversation history, including the text chat with the coach and answer text in comparison tasks;
• coaching memory;
• individual plans, errors, results and recommendations;
• saved phrases and personal learning materials;
• comparison-task recordings;
• tokens, sessions and active access identifiers.

The account record remains as an anonymous marker (without email or name) to keep the remaining records consistent.

4. What remains after account deletion

After account deletion we keep data supported by a separate legal basis:

• invoices and accounting records;
• data needed to establish, exercise or defend legal claims;
• the log of administrative actions and security events;
• evidence of accepted document versions and of consents given and withdrawn (including guardian consents and Family sharing consents).

Currently the following also remain after account deletion, linked to the deleted account's internal identifier: the phone number and birth year in the account record (if provided), analytics events, ratings and comments entered in the app, support tickets and WhatsApp messages. They do not yet have an automatic deletion period. We delete them on request to privacy@fizzup.ai, except data we must keep on a separate legal basis.

Such data are restricted to the relevant purpose and are not used for continued coaching.

5. Backups

Data removed from active systems may remain for a limited period in secured, rotating backups according to infrastructure-provider schedules and disaster-recovery procedures. Backups are not used as active user profiles. If disaster recovery restores deleted data, the deletion request is re-applied to the extent technically possible and legally required.

6. B2B seat vs user account

Removing a seat is not the same as deleting an account. After disconnection from the organisation:

• the organisation loses access to the user's organisation-administration view;
• organisation-funded paid access ends;
• the private account and history remain independent of the former organisation, subject to the automatic periods in section 1; we currently do not automatically delete inactive accounts;
• the user may join another organisation, move to B2C or Family if that model is available, export data or delete the account;
• the user may delete the account earlier at any time.

Private Coaching Layer data remain subject to the user's right to deletion and the applicable retention policy, except data retained on a separate lawful basis.

7. Removing a Family member

Removing a member from a Family plan does not automatically delete that member's private account. The same continuity and retention approach applies as after the loss of a B2B seat. The organiser loses access to that member's data, including data the member previously shared.

8. Subscription vs account deletion

Account deletion and subscription cancellation are separate actions. Cancelling a subscription does not delete the account or data; the account remains until the user deletes it. If a subscription is managed by Apple App Store or Google Play, the user should also cancel it in the relevant store system. For web billing, cancellation is available through the FizzUp account/billing flow.

9. Export

Before deleting the account, the user may download a copy of personal data in a commonly used format (JSON) through the in-app function, or request it by emailing privacy@fizzup.ai. The in-app export does not currently include the text chat with the coach — we provide a copy on request.

10. Timing

Deletion of active data begins without undue delay after a verified request. Statutory response periods for data-subject rights are governed by the GDPR and other applicable law.