Legal
Data Retention and Deletion Policy
Effective November 1, 2026 · Last updated October 18, 2026
Rizora.io LLC
This policy explains how long Rizora keeps each kind of information and when we delete it. It is part of our Privacy Policy and serves as our written retention policy for children's information under COPPA.
1. Our principles
- We keep information only as long as we need it to provide the Services, keep people safe, and meet legal obligations.
- When you close your account, we delete your information within 30 days, except for the limited records listed in section 4.
- We delete information about children sooner where we can, and never keep it longer than this policy allows.
- Some records are kept as a history on purpose (for example, measurables and audit logs). Those are kept while your account is open and deleted or de-identified on the schedule below.
2. While your account is open
| Information | How long we keep it |
|---|---|
| Account and profile information | While your account is open |
| Measurables (including the history of every capture) | While the athlete's account is open. Measurables are never overwritten; the history is the record. |
| Clips, photos, and capture video | Until you delete them or close your account |
| Workouts, completions, streaks, and notes | While your account is open |
| Nutrition plans and imported menus | While your account is open |
| Injury reports | While your account is open; you can delete a report at any time |
| Roster, practice plans, playbooks, and schedules created by a program | While the program's account is open |
| A program's private notes and prospect stages about an athlete | Until the athlete revokes the program's access, blocks the program, or closes their account; then deleted |
| Messages | While the sender's or recipient's account is open |
| AI assistant messages | 90 days, then deleted automatically |
| Records of actions you confirmed through the assistant | Kept with the information they changed |
| Notifications sent to you | 12 months |
| Pending connection requests | 30 days, then they expire and are deleted |
| Unanswered guardian invitations | 30 days |
| Files uploaded to the AI parser (photos, PDFs) | Deleted after the result is confirmed or discarded, and within 7 days at most |
| Source video submitted for clip anonymization | Deleted 30 days after the anonymized clip is released or the purchase is refunded |
| Device push tokens | Until you sign out, turn off notifications, or the token stops working |
| Technical and security logs | 90 days |
3. When you close an account
When an account is closed, by you or by us, we delete or de-identify its personal information within 30 days. That includes profile information, measurables, clips, workouts, messages, assistant conversations, and sharing grants. Any grants you gave programs or trainers end immediately when you close the account.
Parents and minors. If a parent closes their own account, the athlete's sensitive features lock again until another parent or guardian consents. If a parent deletes a child's profile (under 13), the child's information is deleted within 30 days; the coach may keep only the minimal roster entry (first name, last initial, jersey number, position) unless the parent asks us to remove it.
Programs. If a high school, youth, or college program closes its account, its rosters, practice plans, playbooks, notes, and prospect lists are deleted within 30 days. Athletes' own information stays in the athletes' accounts.
Content others received. Messages you sent stay visible to their recipients until those recipients' accounts are closed, but they will show as from a deleted account.
4. What we keep longer, and why
| Record | How long | Why |
|---|---|---|
| Payment, invoice, and refund records | 7 years after the transaction | Tax and accounting law |
| Audit log of consent, grants, verification, evaluations, and payment changes | 3 years after the account closes, with direct identifiers removed where possible | To prove consent was given, investigate abuse, and protect minors |
| Records of verification decisions for staff and trainers | 3 years after verification ends | Safety and fraud prevention |
| Reports of abuse or safety concerns, and related records | As long as needed to protect users, and as required by law | Child safety and legal obligations |
| Information under a legal hold or needed for a legal claim | Until the matter is resolved | Legal obligations |
| Backups | Overwritten within 35 days | Disaster recovery. Deleted information may persist in backups until they roll off; we don't restore it into the live Services. |
5. De-identified information
We may keep information that has been de-identified or aggregated so it can't reasonably be linked to any person, for example, how many workouts were completed across all users in a month. We don't attempt to re-identify it.
6. Requesting deletion sooner
You can delete most content yourself at any time. To ask us to delete something else, or your whole account, use account settings or email legal@rizora.io from your account email. Parents can request deletion of their child's information the same way.
7. Changes
We'll update this policy when our practices change and post the new version here with an updated date. Material changes will be announced as described in our Privacy Policy.
Questions: legal@rizora.io