This page is a plain-language public summary of the same retention behavior Cohese's engineering team follows internally. It doesn't replace our Privacy Policy — read that for the full picture of what we collect and why.
How long we keep things
- Your account profile, after you delete your account: deleted or anonymized within about 30 days.
- A dependent profile with no remaining active Group membership or guardian relationship: reviewed for deletion within about 90 days.
- A Ride's exact pickup/drop-off address and private notes: deleted within about 7 days after the ride ends. Access for anyone but the assigned driver ends immediately when the ride is released, canceled, or completed.
- General Event, Need, Request, and Commitment history: kept for about 2 years to support useful Group history, then deleted or de-identified.
- Guardian-relationship history: kept for about 1 year after it ends. A minimal security record that it happened may be kept up to 3 years.
- Security-relevant records (for example, that a role or permission changed): kept up to 3 years, and never include the sensitive details of what changed — just that it happened.
- Application logs: kept 30 days. Security-related logs: kept 90 days.
Requesting deletion
You can delete your account at any time from inside the Cohese app, or by contacting privacy@cohese.app. A guardian can also request review of a dependent's information the same way.
About backups
Cohese keeps backups for a limited recovery window separate from the timelines above, for disaster-recovery purposes only. Backups are not a way around these deletion timelines — deleted or revoked information is not allowed back into ordinary service if a backup is ever restored.