Retention Schedule
Last updated 20 June 2026
How long we keep each kind of data.
| Data | Kept for | Notes |
|---|---|---|
| Your live operational & staff data | For the life of the account | Earlier deletion goes through a data-subject request — usually via the cafe as controller — and may be subject to audit or legal retention. |
| Food-safety records & their audit trail | While the account is active; exportable on closure | We provide export so you keep your own copy. |
| Account & billing records | 6 years after account closure where legally required | ProCafe as controller; tax/accounting obligation. |
| Support correspondence | 24 months | Kept to resolve issues and maintain service history. |
| Request / security logs | 90 days, then purged | No special-category data; minimal personal data. |
| Backups | 30-day rolling window | Deletions in the live database age out as backups expire. |
| Mobile on-device cache & outbox | Outbox: queued until synced. Cached reads may persist locally until pruned or the device is wiped. | Stored on the device, namespaced per user and cafe. Signing out and clearing the device removes local data. |