Policies / Data Retention
Data Retention
Effective: [EFFECTIVE DATE]
This schedule lists each kind of personal information 24 Frames holds, why we keep it and for how long. Some periods are already enforced by our systems. Others are the periods we have committed to and are bringing our systems into line with; today those records are kept for longer, and we are changing that. The last column says which is which. When a period ends we delete the record or reduce it to totals that cannot identify anyone. Our Privacy Policy explains what each kind of information is used for.
How to read the table
- In place: our systems already delete the record on this schedule.
- Being aligned: the period we are committed to; our systems are being changed to enforce it. Until then, ask us by email and we will delete the record by hand.
The schedule
| Information | What it is | Why we keep it | How long | Status |
|---|---|---|---|---|
| Account | Display name, phone number, gender, age range, interests, bio, avatar; for older accounts, username, email and hashed password | To run your account | Life of your account, then removed within 30 days of a deletion request | Being aligned (deletion by hand on request) |
| One-time code challenges | Phone number, hash of the code, attempts, expiry | To sign you in | One day after the code expires | In place |
| SMS sending records | Phone number, delivery status, which gateway phone sent it; the message text is wiped once sent | To troubleshoot delivery and detect abuse | 30 days | Being aligned |
| Sessions | Device model, app used, hashed sign-in token, last-seen time | To keep you signed in and let you revoke devices | Seven days after the session expires or you revoke it; a viewer session stays active until you revoke it | In place |
| Reports | Who reported what, the reason, any note, the reviewer, the outcome | To moderate fairly and answer disputes | Two years after the report is resolved | Being aligned |
| Watch progress and history | Your position and completion for each title | To resume playback and personalise home | Until you clear it in the app or your account is deleted | In place (clearing); being aligned (account deletion) |
| Library | Titles you liked or saved | To show you your library | Until you untoggle them or your account is deleted | In place (untoggling); being aligned (account deletion) |
| Follows and blocks | Channels you follow or block | To build your feed and hide what you blocked | Until you undo them or your account is deleted | In place (undoing); being aligned (account deletion) |
| Recommendation events | Viewer id (account or anonymous device id), title, event type, seconds watched, session, source | To personalise and count plays honestly | 13 months, then reduced to totals with no viewer id | Being aligned |
| Ad serves and events | Viewer id (signed-in only), title, placement, playback session, ad session, impression/quartile/click/skip | To report campaign totals and enforce frequency caps | Ad session id: one day. Serve and event rows: 13 months, then reduced to totals with no viewer id | In place (ad session); being aligned (rows) |
| Share links | Creator id, open count | So shared links keep working | While the title exists, then removed with the title or the account | Being aligned |
| Audit log | Staff id, action, target, detail; sign-ins | Accountability and security investigations | Two years | Being aligned |
| Uploads and media | Original files, renditions, artwork, editorial declarations | To publish your titles | Until you delete the title; copies in backups roll over within 14 days | In place |
| Live recordings | Raw recording segments and the finished replay | To produce the replay | Raw segments: seven days after the replay is ready. Replay: until you delete it | Being aligned (raw segments) |
| Gateway phone records | Device label, SIM name, Android version, battery, heartbeat times for our own SMS phones | To run the SMS gateway | While the phone is enrolled, then removed within 30 days | Being aligned |
| Database backups | A full nightly copy of the database | To recover from failure | 14 days | In place |
What the words mean
- Deleted: removed from our live database and storage. It lingers in nightly backups for up to 14 days, then it is gone.
- Reduced to totals: we keep numbers (for example plays of a title on a given day) but remove the identifier that linked them to a person or device.
- Removed with your account: when you ask us to delete your account (see Delete Your Account), these records go with it inside the 30-day period. Reports you made and audit entries about your account stay for their periods but no longer point to a name or a phone number.
On your phone
Downloads, the encrypted streaming cache (up to 2 GiB), your last eight searches, publishing drafts and copies of media you picked to publish stay on your phone until you delete them in the app or uninstall it. Signing out does not remove them. See the Privacy Policy, section 14.
Asking for earlier deletion
You need not wait for a period to end. Email [PRIVACY CONTACT EMAIL] with the phone number on your account and we will act within [DATA REQUEST RESPONSE PERIOD]. To delete your whole account, follow Delete Your Account. Some records we must keep for legal reasons, such as a report in a live dispute; if so, we will tell you.
Changes
We will update this schedule as our systems catch up, and the "Being aligned" marks will disappear as that happens. The effective date at the top moves each time.