pace.
Privacy and safety
How long information is kept
What happens to information while an account is active and after deletion.
Updated 14 October 2026
Email Pace about privacy or safetyAccount and study history
We keep the account and revision records needed to provide your active planner. You can delete your account in Settings. We review accounts after 24 months without reliable activity and delete information that is no longer needed, considering any active family or safety issue. This inactivity review is a manual process; it is not an automatic timer or a promise that every study session is deleted after a fixed number of months.
Shorter operational expiry rules
Scheduled maintenance removes eligible operational records in bounded batches. Expiry makes credentials unusable before their records are deleted. A busy queue or maintenance failure can delay physical removal; we monitor failures and rerun the job.
•
Sign-in links expire after 15 minutes; their records are removed 24 hours after expiry.
•
Expired or revoked refresh-token records are removed 30 days after the later of expiry or revocation.
•
Family invitations expire after 48 hours; closed invitation records are removed after 30 days.
•
Server-issued study-start proofs expire after 7 days; records are removed 30 days after expiry to allow offline retries.
•
Parent kudos are removed after 90 days.
•
Minimal sharing-choice audit events are removed after 24 months.
•
Reviewed internal-test safety reports resolved with no action are removed 180 days after review. Open or escalated cases are held only for a documented continuing need and reviewed separately.
Providers and backups
DigitalOcean publishes a standard seven-day window for daily managed PostgreSQL backups. A deletion can remain in a protected backup until the provider expires it; this is not a promise of immediate or exact seven-day erasure from every copy. If we restore a backup, we must reapply deletions and sharing withdrawals before reopening access.
Resend publishes 30-day email and log retention for Free, Pro and Scale plans and seven-day backup retention. Its account-termination window is a separate provider rule, not the time it takes to delete your Pace account. Email recipients may keep delivered messages in their own inboxes. Hosting security logs and support messages have separate provider or case retention; we minimise what they contain and review any continuing need rather than promising an unverified universal expiry.
Requests, holds and devices
We keep minimum closed rights-request and privacy-complaint evidence for 24 months and ordinary closed support correspondence for 90 days. These are manual review and deletion rules. Closed ordinary safety evidence is removed after 180 days unless a specific reporting or legal requirement needs longer. Any longer hold must have a specific reason, restricted access and a review date. We do not keep full study history merely as deletion evidence.
Account deletion does not remotely erase an offline device, browser storage or a delivered email. Sign out and clear local Pace data on devices you no longer use. Read Account deletion instructions for what the server removes and what may remain.