Skip to main content

Data Retention

How long each kind of record lives, and what deletion actually removes

4 min readUpdated Sep 3, 2026

While your account exists

Everything you record is kept until you remove it. There is no rolling window

that quietly drops last year's food logs, and no cap on how many lab panels you

can hold.

That is the point of the product rather than an oversight: a ferritin reading

from two years ago is what makes this year's reading mean something, and a

trend needs the far end of itself to still be there.

You can delete any individual item at any time — a food log, a lab panel, a

condition — and it goes immediately.

When you delete your account

Deletion erases the record. Not access to the record; the record.

In one operation, ClapDiet removes your labs and the documents behind them,

your food, hydration, weight and tracking logs, your nutrient snapshots,

conditions, medications, allergies, preferences and goals, your custom foods,

favourites, collections and meal plans, your reminders and notifications, your

AI conversations and everything derived from them, your insights, achievements,

points and streaks, your safety alerts, your search history, and your sessions,

OAuth links, two-factor backup codes and device tokens. The account row itself

is blanked — name, date of birth, biological sex, height, weight, location, all

of it — leaving an identifier attached to nothing about a person.

It is immediate. There is no grace period, no queue and no window in which it

can be undone. If you want your data, export it

first.

The two things that survive, and why

Subscription and invoice records. Financial records carry a statutory

retention period, and they contain no health data. They stay attached to the

blanked account row rather than to a person.

The security audit trail. Sign-ins, failed sign-ins, password changes,

administrator actions and the record of your deletion. It is kept 90 days

and purged nightly on its own schedule, deletion or no deletion. Erasing it on

request would remove the evidence of the deletion itself, and with it any

ability to investigate an account takeover that ended in one.

Neither is a copy of your health data. There is no third thing.

Inactive accounts

Nothing happens. ClapDiet does not delete accounts for inactivity, does not

send escalating warning emails about it, and has no ladder of reminders at one,

two and three years.

An older version of this article described exactly that ladder. It did not

exist. Your account and your data will be here whenever you come back.

Backups

Database snapshots are taken for operational recovery. A snapshot from before a

deletion contains what the database held at that moment, which is why erasure

is described above as removing the record from the live database. Snapshots are

not queried, are not used to serve anything, and are not restored to bring back

a deleted account.

Logs and caches

  • Audit rows: 90 days, purged nightly.
  • Expired sessions: cleared nightly.
  • Cached lookups such as food-database statistics hold no personal data.
  • The short version

    RecordHow long Everything you recordUntil you delete it Your accountUntil you delete it — inactivity never deletes it After account deletionErased immediately Subscriptions and invoicesKept, as tax rules require Security audit trail90 days, then purged
    Questions about your data? Email privacy@clapdiet.com Related Articles:
  • Account Deletion
  • Exporting Your Data
  • Tagsretentionstoragedurationdeletekeep
    ClapDiet
    PrivacyTermsContact

    © 2026 ClapDiet. All rights reserved.