Data Retention Policy

This policy should be read alongside our Privacy Policy .

1. Overview

This document explains how long we retain different types of data and the reasons for these retention periods. We are committed to keeping your data only as long as necessary for the purposes outlined in our Privacy Policy, while also meeting our legal obligations.

2. Active Accounts

While your account is active, we retain all data associated with your account, including your profile information, class bookings, attendance history, preferences, and payment records. This data is necessary to provide you with our services and maintain your account.

3. After Account Deletion

When you request deletion of your account (user-initiated deletion):

• 90-day recovery period: your data is retained for 90 days to allow for account recovery in case of accidental deletion or change of mind
• Permanent deletion: after the 90-day period, all personal data is permanently deleted, including your profile, booking history, class attendance records, and account preferences
• Payment records exception: payment records are retained for 7 years as required by law (see Section 4)

4. Payment Records

Payment records, including billing information and transaction history, are retained for 7 years as required by EU and Italian tax law. These records cannot be deleted before this period expires, even upon account deletion request. After the 7-year retention period, payment records are securely deleted.

5. Communication Records

Transactional emails (such as booking confirmations, class reminders, and payment receipts) are retained for 30 days for customer support and dispute resolution purposes. After this period, these records are permanently deleted.

6. Security Logs

IP addresses and access logs are retained for 90 days for security purposes, including fraud prevention, abuse detection, and investigation of security incidents. After this period, these logs are permanently deleted.

7. Zoom Integration Data

When the Zoom integration is enabled for online or hybrid classes, we store Zoom meeting IDs and join URLs to facilitate your access to virtual classes. This data is deleted when:

• The associated class is cancelled
• The Zoom integration is disconnected from your account

8. Requesting Data Deletion

To request deletion of your personal data, please refer to Section 6 — Your Rights in our Privacy Policy, which outlines your rights under GDPR including the right to erasure ("right to be forgotten").

You can also contact us directly at support@ananda.app to submit a data deletion request. We will respond within 30 days.