Data Retention Policy

Life Ribbon Data Retention Policy

Last Updated: June 20, 2026 Effective Date: June 20, 2026

This Data Retention Policy explains how long RUPTON LLC retains information for Life Ribbon and how deletion works. It supplements the Life Ribbon Privacy Policy and Terms of Service.

Our retention principle is simple: preserve user-directed memories while the account or project is active, remove information when it is no longer needed, and keep limited records when required for security, billing, legal compliance, dispute resolution, or backup integrity.

1. Active Accounts and Projects

For active accounts, Life Ribbon generally keeps account data, projects, stories, recordings, videos, photos, transcripts, AI metadata, chapter narratives, story packs, family permissions, and related project records until:

You delete the item.
You delete the project.
You revoke an invitation or collaborator.
You delete the account.
We remove the content for legal, safety, security, billing, or Terms enforcement reasons.

2. Retention Schedule

| Data Category | Typical Retention | Notes | | --- | --- | --- | | Account profile and auth records | Life of account | Deleted or anonymized after account deletion where technically and legally possible. | | Google sign-in identity | Life of account or until disconnected where available | Provider-side records may remain with Google. | | Project and family metadata | Life of project/account | Includes project title, roles, invite status, relationship labels, and permissions. | | Story text, journal entries, transcripts, and metadata | Life of story/project/account | User-controlled deletion may remove individual items sooner. | | Audio, video, photos, and uploaded media | Life of story/project/account | Storage limits and paid-tier rules may apply. | | AI output and processing status | Life of story/project/account | Includes summaries, themes, follow-ups, chapter narratives, and retry/error state. | | Voice consent and narration records | Life of account or feature use plus legal/security period | Needed to prove consent and manage narration features. | | Story pack purchase/unlock records | Life of account plus billing/legal period | Needed to restore access and support purchases. | | Subscription and entitlement records | Life of account plus billing/legal period | RevenueCat, Stripe, Apple, and Google may retain processor records independently. | | Family credits, promo codes, comps, tester flags | Life of account plus audit period | Needed for account support, abuse prevention, and financial controls. | | Pending invitations | Usually up to 90 days unless accepted, revoked, or extended | Expired invitation data may be retained briefly for abuse prevention and audit. | | Support messages and admin notes | Up to 3 years unless longer needed | May be retained for dispute, safety, billing, or legal reasons. | | Admin audit logs | Up to 7 years | Needed for account control, deletion, billing, comp grants, and security accountability. | | Authentication, access, and security logs | Usually 90 to 180 days | May be retained longer for investigations, abuse, fraud, or legal holds. | | Upload, transcription, and function error logs | Usually 30 to 180 days | Used for reliability, support, retry, and security. | | Payment, tax, invoice, refund, and accounting records | Up to 7 years or longer if required | Card data is handled by processors, not stored by Life Ribbon. | | Legal requests, disputes, and policy enforcement records | As long as necessary | May be retained through the matter and applicable limitation periods. | | Backups and disaster recovery copies | Generally overwritten within 30 to 90 days | Backup deletion is controlled by backup cycles and provider systems. |

3. User-Controlled Deletion

You may delete supported individual items, projects, media, transcripts, or account data through available app or web controls. Some deletion controls may vary by platform, release channel, or account role.

When you delete an item:

Active service copies are deleted or marked for deletion.
Related AI output, metadata, signed URLs, and review references may be deleted or disconnected.
Backup copies may remain until overwritten by backup cycles.
Security, billing, audit, support, and legal records may remain where allowed or required.

4. Account Deletion

You can initiate account deletion in the app or web portal where available, or by contacting `privacy@liferibbon.app`.

When account deletion is confirmed or scheduled:

Your account may be deactivated or limited during the waiting period.
Owned projects, story responses, media, transcripts, family records, invitations, and auth records are deleted or anonymized where legally and technically possible.
Active service deletion is designed to complete within 30 days after the scheduled deletion date or verified deletion request.
Backup copies generally age out within 30 to 90 days.
Purchase, invoice, tax, refund, fraud-prevention, security, audit, dispute, and legal records may be retained as needed.

Deletion is permanent. Export important content before deleting your account.

5. Collaboration and Shared Content

Life Ribbon can remove access inside the service, but cannot control copies that collaborators, family members, invitees, or viewers previously downloaded, exported, saved, screen-recorded, photographed, backed up, or shared outside Life Ribbon.

If you delete a project or account, another user's independent account records, billing records, support records, or copies outside Life Ribbon may remain.

6. Connected Services

If you use Google sign-in, Google Drive export, Google Photos import, app store purchase systems, Stripe, RevenueCat, or other connected services, those providers may retain records under their own policies.

Disconnecting a service or deleting a Life Ribbon account does not automatically delete information stored in your Google Drive, Google Photos, device library, app store account, Stripe billing history, RevenueCat records, email inbox, or exported files.

7. AI and Transcription Providers

Recordings, transcripts, prompt text, and story metadata may be processed by AI or transcription providers to provide user-requested features. Provider logs and processing records may be retained according to provider terms, enterprise settings, data processing agreements, abuse-monitoring rules, and legal obligations.

Life Ribbon stores transcripts and AI output in your account until deleted under this policy. Failed transcription or narrative attempts may retain error status so you can retry or support can troubleshoot.

8. Legal Holds and Safety Exceptions

We may preserve information longer if we believe retention is necessary to:

Comply with law, tax, accounting, or valid legal process.
Respond to disputes, chargebacks, refunds, or investigations.
Enforce Terms, protect rights, or prevent harm.
Detect or prevent fraud, abuse, unauthorized access, or security incidents.
Preserve evidence related to illegal content or serious policy violations.

When a legal hold applies, deletion may be delayed until the hold is released.

9. Inactive Accounts

Life Ribbon is designed for long-term family archives, so we do not automatically delete active paid archives solely because they are old.

Free or inactive accounts may be reviewed after extended inactivity. We may send notice before suspension or deletion where required or practical. Continued inactivity, unreachable email, nonpayment, abuse, or storage-limit violations may result in suspension or deletion according to the Terms and applicable law.

10. Privacy Requests

To request access, export, correction, deletion, restriction, or information about retention, contact:

Privacy: `privacy@liferibbon.app`

Support: `support@liferibbon.app`

Legal notices: `legal@liferibbon.app`

We may verify your identity and authority before fulfilling a request. Response timelines depend on applicable law and request complexity.