Data Retention Policy

JOY

Effective: June 27, 2026 · Joy Health Technologies LLC

This policy explains how long Joy Health Technologies LLC retains different types of data, and why. We retain data only as long as necessary for the purposes described in our Privacy Policy, and we delete data promptly when it is no longer needed.

1. Retention Schedule

Data Type	Where Stored	Retention Period	Deletion Trigger
Account credentials (email, hashed password, OAuth tokens)	Firebase Auth	Until account deletion + 30 days	Account deletion request
Senior profile (name, age range)	Firestore: users/{uid}	Until account deletion + 30 days	Account deletion request
Caregiver profile (name, relationship)	Firestore: users/{uid}	Until account deletion + 30 days	Account deletion request
Family Memory photos	Firebase Storage: memories/{seniorId}/	Until deleted by caregiver or account deletion + 30 days	Caregiver deletes memory OR account deletion
Caregiver voice messages	Firebase Storage: memories/{seniorId}/voice/	Until deleted by caregiver or account deletion + 30 days	Caregiver deletes memory OR account deletion
Caregiver voice questions	Firebase Storage: memories/{seniorId}/questions/	Until deleted by caregiver or account deletion + 30 days	Caregiver deletes memory OR account deletion
Senior voice replies	Firebase Storage + Firestore: users/{uid}/voiceReplies/	12 months rolling	Auto-purge after 12 months
Daily session records (brain scores, wellness answers, mood, completion)	Firestore: users/{uid}/sessions/{date}	24 months rolling	Auto-purge after 24 months
Streak data	Firestore: users/{uid}	Until account deletion	Account deletion request
Push notification tokens	Firestore: users/{uid}.expoPushToken	Until token expires or account deletion	Expo token expiry or account deletion
AI-generated prompts	Firestore: memories/{seniorId}/items/{id}.aiPrompts	Same as parent memory doc	Memory deletion or account deletion
Memory lastShownAt timestamps	Firestore: memories/{seniorId}/items/{id}	Same as parent memory doc	Memory deletion or account deletion
Analytics events	Firestore: events/	Anonymized after 90 days; raw data deleted after 90 days	Auto-purge at 90 days
Support email correspondence	Google Workspace (Gmail)	2 years from last correspondence	Manual deletion after 2-year mark
Aggregated / anonymized analytics	Internal only	Indefinite (no personal identifiers)	Not applicable

2. Why We Retain Data

Active accounts: Data is retained while your account is active to provide continuity of service (e.g., streak history, photo library).
30-day grace period after deletion: Brief buffer to allow recovery in case of accidental deletion. All data is permanently purged at the end of this window.
Rolling session history (24 months): Allows caregivers to view meaningful activity trends without storing data indefinitely.
Support correspondence (2 years): Allows us to reference prior communications if issues recur.
Anonymized analytics (indefinite): Aggregated data with no personal identifiers helps us understand how features are used across all users. No individual can be identified from this data.

3. Early Deletion

You do not need to wait for a scheduled purge. You can delete data earlier:

Delete a specific memory (photo + voice): Caregiver Dashboard → Edit Memory → Delete This Memory. Immediate deletion from Firestore and Firebase Storage.
Delete your account and all data: See our Account Deletion Policy. Data deleted within 30 days of request.
Data deletion request: Email joy@joyhealthtechnologies.com with specific items to be deleted.

4. Legal Hold

In limited circumstances, we may be required to retain data beyond our standard retention periods to comply with a legal obligation, court order, regulatory investigation, or to preserve evidence in connection with an active legal dispute. In such cases, we will retain only the minimum data required and for no longer than legally necessary.

5. Third-Party Retention

Data shared with third-party services (Firebase/Google, Anthropic) is subject to those services' own retention policies. We send minimal data to Anthropic (name, relationship, caption, category only) and do not control Anthropic's retention period for API request logs. See our Privacy Policy for links to each vendor's policy.

Questions or deletion requests: joy@joyhealthtechnologies.com