Data Retention Policy

Last updated: February 12, 2026

This policy describes how long mealtally retains your personal data, how we delete data, and your rights to request deletion. This supplements our Privacy Policy.

1. Retention Periods

• Active account data — retained while your account is active
• Deleted accounts — 30-day soft delete, then permanent deletion
• Server logs — 30 days
• Analytics data (PostHog) — 90 days
• Database backups — 30 days (rolling)
• Billing records (Stripe) — 7 years (tax compliance)
• Session tokens — 7 days / magic links 15 minutes

2. Account Deletion

You can delete your account by contacting privacy@mealtally.com. Your account is immediately inaccessible, with a 30-day recovery window before permanent deletion.

3. What is NOT Deleted

• Billing records — Stripe retains payment records for 7 years
• Aggregated analytics — anonymized data may be retained indefinitely
• Legal holds — data subject to legal holds is retained as required by law

4. Your Deletion Rights

Under GDPR and CCPA, you have the right to request deletion of your personal data. Contact privacy@mealtally.com and we will respond within 30 days.

5. Contact Us

Questions about data retention? Contact privacy@mealtally.com.