Aelyra

Account and legal records

Account and profile data: kept until account deletion unless a legal retention requirement applies.

Legal acceptance and consent history: kept for the account lifetime and, where legally necessary, for defense or compliance after deletion in minimized form.

Activity and location records

Raw FIT files, parsed activities, GPS records, and generated map previews: kept until the user deletes the activity or account, unless a shorter retention rule is configured.

AI, logs, exports, and backups

AI traces: full traces are redacted by default unless AI history storage is enabled. AI telemetry is retained only as long as needed for security, cost control, and debugging.

Logs: target retention is 30-90 days. Logs must be redacted and access-restricted.

Exports: export files should expire after 7-14 days once queued archive export is implemented.

Backups: TO BE CHANGED based on hosting provider. Backup retention must be short, encrypted, and documented.

Billing

Billing records: not applicable until paid services launch; then retained as required by tax/accounting law.