RaiseloDraft for review. Not yet in effect. Highlighted items need to be filled in.
Effective [date]. This schedule is part of our privacy notice.
Why family records are kept
Raiselo is a record of how two households share the care of their children. Messages can't be edited or deleted after they're sent, and expenses keep a log of every change. If a court ever needs to see that record, it has to be complete. So a family's records are kept for as long as the family uses Raiselo, and for a set period afterwards, even when one parent leaves.
Family records
Calendar entries and swap requests, messages and attachments, expenses, receipts and their history, the info vault (records and documents about each child), the activity log, and exports.
| When | What happens |
|---|---|
| While at least one parent is still in the family | Kept, and visible to the family's parents and to anyone they've given read-only access. |
| When the last parent leaves | The family closes. No one can join it or add to it, and its records are stored, not shared. |
| After the retention period | Everything is permanently deleted, including uploaded files. The retention period starts when the family closes. It's 7 years unless the parents choose a shorter one (between 2 and 7 years). |
Exports after deletion. When a family's records are deleted, its exported PDFs are deleted too. We keep only each export's fingerprint, verification code and date range, so a copy someone already has can still be confirmed as genuine at raiselo.pages.dev/verify.
Your account
| Data | How long |
|---|---|
| Profile (name, email, photo) | Until you delete your account. See Deleting your account. |
| Notification tokens for your devices | Until you sign out on that device or ask to delete your account. |
| Calendar feed links | Turning a feed off stops it at once. The link itself is deleted when you ask to delete your account. |
| Records of uploads that were refused | Until you ask to delete your account. |
| Message protection setting and private read times | The setting is deleted when you turn protection off. Private read times are kept with the family's records. |
Sharing and downloads
| Data | How long |
|---|---|
| Shared export links | Work for 7, 30 or 90 days (the parent chooses), or until a parent turns them off. The record of the link is kept with the family's records. |
| Read-only access invites | An unused invite expires after 7 days. Access ends when a parent removes it. The person's copy on their phone is wiped the next time it refreshes. |
| "Download my data" archives | Deleted 7 days after they're ready. Each download link works for 10 minutes. An archive from a request that failed is deleted at the next daily clean-up. |
Deleting your account
You can delete your account in the app under Settings, then Delete account. You'll be asked to sign in again first.
- Straight away: you're signed out on every device, notifications and calendar feeds stop, and your device tokens and feed links are deleted.
- For 7 days: you can change your mind by signing in again and cancelling.
- After 7 days: your name and photo are removed from your profile (you appear as "Former parent"), you leave every family, and your sign-in account is deleted.
- What stays: messages, expenses and other entries you added remain part of the family's record, because the other parent relies on it being complete. They're deleted with the rest of the family's records when its retention period ends.
- If you were the last parent: the family closes and its retention period starts.
On your phone
Raiselo keeps a copy of your family's records on your phone so it works offline. That copy is wiped when you sign out, when someone else signs in on the same phone, or when you uninstall the app.
Backups
Our database provider keeps backups so data can be recovered after a failure. Data we delete can remain in those backups for up to [N] days, after which it's overwritten. Backups are never used for anything except recovery.
Questions
Write to [contact email].