Data Retention, Export and Deletion — FizzUp

1. Principle

Users can export their data and delete their account. Account deletion is not replaced by merely “freezing” the account.

Independently of account deletion, some data are deleted automatically:

• comparison-task recordings — after 7 days at the latest (checked every hour);
• conversation transcripts and answer text in comparison tasks — after 90 days by default, unless the user chose a different setting;
• live conversation audio is not stored at all.

Coach memory and learning activity are kept until the user deletes them (in privacy settings or by deleting the account). The Privacy Policy, section 5, describes the details and available settings.

2. How to delete an account

FizzUp provides:

1. a readily discoverable account-deletion function in the app;
2. an account-deletion request form on the FizzUp website; submitting the form does not mean deletion has completed — required confirmation and the result are provided in that process;
3. the ability to submit a request to privacy@fizzup.ai if the user cannot access the app.

We may require reasonable identity verification to protect the user.

3. What is deleted

After effective account deletion, we delete or irreversibly dissociate from the user, except where continued retention is legally required:

• email address, name, login data and learning-profile data;
• private transcripts and conversation history, including the text chat with the coach and answer text in comparison tasks;
• coaching memory;
• individual plans, errors, results and recommendations;
• saved phrases and personal learning materials;
• comparison-task recordings;
• tokens, sessions and active access identifiers.

The account record remains as a technical marker without email, name, phone number or birth year. A retained internal identifier requires separate access and purpose restrictions; it is not evidence that other records have been anonymised.

4. What remains after account deletion

After account deletion we keep data supported by a separate legal basis:

• invoices and accounting records;
• data needed to establish, exercise or defend legal claims;
• the log of administrative actions and security events;
• evidence of accepted document versions and of consents given and withdrawn (including guardian consents and Family sharing consents).

Account deletion includes clearing the phone number and birth year from the active account record, if provided. The retained technical marker and internal identifier maintain record consistency; replacing profile data alone does not anonymise all related data. Support tickets, comments, attachments and event content may contain personal data even after the account identifier is detached. Detaching the identifier does not delete that content. Such content is within the scope of the deletion request; we retain only what is necessary for a specific purpose on a separate basis described above. We determine the scope and retention period for retained data, and the user may request an explanation or exercise their rights at privacy@fizzup.ai. WhatsApp messages and copies held by providers are addressed separately within that request; account deletion is not a promise that every copy at external recipients is immediately removed.

Such data are restricted to the relevant purpose and are not used for continued coaching.

5. Backups

Data removed from active systems may remain for a limited period in secured, rotating backups according to infrastructure-provider schedules and disaster-recovery procedures. Backups are not used as active user profiles. If disaster recovery restores deleted data, the deletion request is re-applied to the extent technically possible and legally required.

6. B2B seat vs user account

Removing a seat is not the same as deleting an account. After disconnection from the organization:

• the organization loses access to the user's organization-administration view;
• organization-funded paid access ends;
• the private account and history remain independent of the former organization, subject to the automatic periods in section 1; we currently do not automatically delete inactive accounts;
• the user may join another organization, move to B2C or Family if that model is available, export data or delete the account;
• the user may delete the account earlier at any time.

Private Coaching Layer data remain subject to the user's right to deletion and the applicable retention policy, except data retained on a separate lawful basis.

7. Removing a Family member

Removing a member from a Family plan does not automatically delete that member's private account. The same continuity and retention approach applies as after the loss of a B2B seat. The organiser loses access to that member's data, including data the member previously shared.

8. Subscription vs account deletion

Account deletion and subscription cancellation are separate actions. Cancelling a subscription does not delete the account or data; the account remains until the user deletes it. If a subscription is managed by Apple App Store or Google Play, the user should also cancel it in the relevant store system. For web billing, cancellation is available through the FizzUp account/billing flow.

9. Export

Before deleting the account, the user may download a copy of personal data in a commonly used format (JSON) through the in-app function, or request it by emailing privacy@fizzup.ai. The in-app export does not currently include the text chat with the coach — we provide a copy on request.

10. Timing

Deletion of active data begins without undue delay after a verified request. Statutory response periods for data-subject rights are governed by the GDPR and other applicable law.