Data Retention Policy

ORYN Quest, Inc. ("ORYN Quest," "Company," "we," "our," or "us") provides this Data Retention Policy ("Policy") to explain how long personal information is kept on the ORYN Quest platform (the "Platform") and what happens when you ask us to delete it. This Policy supplements the ORYN QUEST — PRIVACY POLICY and states our actual practices — including where no automatic schedule currently exists — rather than aspirational ones.

ARTICLE 1 — GENERAL RETENTION PRINCIPLE

1.1 Retain While Active; Delete on Request

Our baseline practice is straightforward: we retain personal information while your account is active and as needed to provide the Platform's services, and we delete it upon a verified deletion request, subject to the carve-outs in Article 4.

1.2 No Fictional Schedules

Except for the specific automated windows listed in Article 2, the Platform does not currently run a global automatic purge schedule that deletes account data after a fixed period of inactivity. We state this plainly so that this Policy reflects reality. If we introduce automated retention schedules in the future, we will update this Policy first.

1.3 Retention Criteria

Where a retention decision must be made, we consider: whether your account remains active; whether the information is needed to provide services you use; whether we are legally required to keep it (tax, corporate, and financial rules); whether it is needed for safety, fraud prevention, or dispute resolution; and whether you have requested deletion.

1.4 Account Inactivity

An inactive account is not automatically deleted today. If your account is inactive for an extended period, we may send re-engagement emails (which you can unsubscribe from), but your data remains retained under Section 1.1 until you delete it or request deletion. If we ever adopt an inactivity-based deletion schedule, we will update this Policy and provide notice first.

ARTICLE 2 — AUTOMATED RETENTION WINDOWS THAT EXIST TODAY

The following automated cleanup and expiry processes currently run on the Platform. In summary:

• cached third-party place data: cleaned on an approximately 24-hour cycle;
• AI response caches: cleaned daily;
• waitlist claim windows: a waitlist hold gives the family approximately 24 hours to claim the spot; expired holds are swept by an automated job that runs about every 15 minutes;
• raw in-app activity events: deleted by a daily job approximately 90 days after they occur;
• assistant personalization memory: items unreferenced for 30 or more days lose confidence, are progressively deprioritized, and are deleted once confidence falls below a set threshold; each account's memory is also capped, with the oldest items deleted to make room for new ones;
• voice audio: never received or stored by ORYN Quest — only the text transcript is kept (Section 2.7).

In detail:

2.1 Place-Data Cache — approximately 24 Hours

Cached third-party place and venue data used for discovery and maps (sourced from Foursquare, with AI enrichment) is cleaned on a roughly 24-hour cycle.

2.2 AI Response Cache — Daily Cleanup

Short-lived AI response caches used to make assistant features fast are cleaned daily.

2.3 Waitlist Holds — approximately 24 Hours

When a waitlist spot opens and is offered, the family has approximately twenty-four (24) hours to claim it. Holds that pass their deadline are expired — and the next family in line is offered the spot — by an automated sweep that runs about every fifteen (15) minutes.

2.4 Assistant Memory Decay and Deletion

Personalization memory items generated from AI assistant conversations lose confidence when they go unreferenced for thirty (30) or more days. A weekly automated process applies this decay, so stale memory items are progressively deprioritized in personalization — and once an item's confidence decays below a set threshold, the same process deletes it. Separately, assistant memory is capped per account (per Child, plus a general pool): when a cap is reached, the oldest items are deleted to make room for new ones.

2.5 In-App Activity Events — approximately 90 Days

Raw in-app activity events used for personalization (such as searches, listing views, and favorites) are deleted by a daily automated job approximately ninety (90) days after they occur. The durable personalization summary derived from them (the interest profile) is not part of this window; it is retained under Section 1.1 and handled as described in the ORYN QUEST — PRIVACY POLICY.

2.6 No Other Automated Windows

No other automated deletion windows should be assumed. In particular, Credits ledgers, Bookings, messages, reviews, and profiles persist while your account is active; on a verified deletion request they are handled as described in Article 3 (including the message and community-content rule in Section 3.2), subject to the carve-outs in Article 4.

2.7 Voice Audio — Never Stored by ORYN Quest

Audio from the AI assistant's voice features is streamed from your device directly to our AI provider (Google's Gemini Live service) and is not received, recorded or stored by ORYN Quest at any point, so there is no audio retention window. What we retain is the text transcript of each voice exchange, stored in your assistant conversation history under Section 1.1 and deleted on request under Article 3, and a session handle that lets an interrupted voice session resume, which carries its own expiry time and is deleted with your account. The processing runs on Google's paid API service tier, under terms providing that Google does not use the prompts or responses to improve its products and logs them for a limited period solely to detect and prevent violations of its prohibited-use policy and to make any legally required disclosures.

2.8 Website Analytics — 14 Months

Google Analytics event-level data for the website — collected only after a visitor chooses "Accept All" on the cookie banner, and never in the Kid Zone — is retained by Google on our behalf for fourteen (14) months, after which only aggregated reports remain. Withdrawing consent stops further collection; it does not shorten this schedule for data already collected. See the ORYN QUEST — COOKIE POLICY, Section 2.3.

ARTICLE 3 — DELETION ON REQUEST

3.1 How to Request Deletion

You may request deletion of your account and associated personal information — including Child profiles and data associated with social sign-in providers — at any time:

• immediately, through Account → Delete account in the app or on the website (steps at https://orynquest.com/account-deletion);
• by following the instructions at https://orynquest.com/legal/data-deletion; or
• by emailing support@orynquest.com — from the email address on your account where you can; if you cannot (for example, you signed in with Apple using Hide My Email), say so, and we will verify you by replying to the address on file, which Apple's relay forwards to you, or by asking you to confirm the request from inside your account while signed in.

3.2 What Deletion Covers

A verified deletion request removes your account itself, your sign-in credentials, your profile information, your Child profiles (with their accessibility, behavior, and insurance details, any photograph of the Child — the stored image file is deleted, not merely unlinked — and everything derived from them, such as skill scores and behavioral signals), assistant conversations, conversation summaries and personalization memory, interest profiles and embeddings, activity events, favorites, and connected-calendar and device tokens, except where a carve-out in Article 4 requires retention.

Messages and community content are handled differently, and we state this plainly: deletion does not remove them. Message content you sent to other users, and community posts, comments, and reviews you published, remain on the Platform after account deletion, re-attributed to a neutral "Deleted User" placeholder with your name, contact details, avatar, and location removed. We retain this content on the safety, moderation, and dispute-record grounds of Sections 4.4 and 4.5 — conversations and community threads are the record of what was said if a safety report, moderation action, or dispute arises. Where any carve-out applies, we retain only what the carve-out requires and continue to protect it under the ORYN QUEST — PRIVACY POLICY.

One safety valve applies to everything we retain under this Section: if retained content contains personal information within its text — for example, your name, a child's name, or contact details inside a review or message you wrote — you may ask us to redact it, and we will remove or de-identify that information unless a carve-out in Article 4 requires us to preserve the specific passage (for example, message content that is the record of a safety investigation). Public reviews and posts are additionally removed from public display on request where no open dispute, safety, or moderation matter depends on them.

3.3 Timing

We act on verified deletion requests promptly and within the timeframes required by applicable law. We will tell you if a portion of your data must be retained under Article 4 and why.

ARTICLE 4 — LEGAL, SAFETY, AND COMPLIANCE CARVE-OUTS

We retain the following categories even after account deletion, for as long as the underlying obligation or need persists:

4.1 Payment and Financial Records

Transaction records, payout records (including payout-basis snapshots), refunds, and tax-related records (including information supporting IRS reporting obligations) are retained as required by tax, accounting, and financial laws.

4.2 Consent and Acceptance Records

Records of your acceptance of Platform policies — stamped with the document version and time of acceptance under the Platform's versioned consent system — are retained as evidence of the agreements formed.

4.3 Waiver Signatures

Signed waiver records — including per-version signature history required by Vendors for participation and the signature metadata captured with each signature (the signing name as typed, the date and time of signature, and, where reported by the signing surface, the IP address and browser identification of the signing device) — are retained as evidence of executed waivers.

4.4 Moderation and Safety Records

Records of moderation events, safety reports, enforcement actions, and related investigations are retained where needed to protect children and users, enforce our policies, comply with the ORYN QUEST — CHILD SAFETY POLICY (including cooperation with law enforcement and child protective agencies), and defend legal claims.

4.5 Fraud Prevention and Disputes

Records reasonably necessary to prevent fraud and abuse, resolve chargebacks and disputes, enforce our agreements, or establish, exercise, or defend legal claims are retained until the underlying matter is resolved and any limitation periods have run.

One such record is stated here so it is not a surprise: when an account receives Welcome Credits or Referee Credits (ORYN QUEST — REFUND & CANCELLATION POLICY, Section 12.8), we keep a record of that grant made only of one-way SHA-256 hashes of the email address and of the verified mobile number on the account at the time, the number of Credits and the date. This record is not removed by account deletion — it is what prevents a second grant to a new account created with the same email address or mobile number — and it cannot be turned back into the email address or number.

4.6 Vendor Financial and Marketplace Records

For Vendor accounts, payout records (including the payout-basis snapshots used to calculate what a Vendor was owed), transaction histories, and tax-reporting information are retained as required by financial and tax rules, even if the Vendor later leaves the Platform.

4.7 Legal Process

Information subject to a litigation hold, subpoena, court order, or regulatory obligation is retained for the duration of that obligation.

4.8 Scope of Carve-Outs

In every case, we retain under this Article 4 only the records the underlying obligation or need actually requires, for as long as it persists, and we continue to protect retained records under the ORYN QUEST — PRIVACY POLICY. Carved-out records are not used for personalization or any new processing purpose.

ARTICLE 5 — BACKUPS AND RESIDUAL COPIES

The Platform's infrastructure providers maintain backups and redundancy copies in the ordinary course of operating reliable systems. Deletion from live systems does not instantaneously remove residual copies from backups; such copies expire or are overwritten in the ordinary course of backup rotation and are not used for active processing after deletion. We do not state a specific backup-expiry period in this Policy because backup schedules are managed by our infrastructure providers and may change; we will not restore deleted personal information from backups except where required for disaster recovery or legal obligations.

One category requires no personal-data retention at all: the children's play area at /play stores game progress only in local storage on the visitor's own device, so there is no server-side kid-zone personal data to retain, back up, or delete. The only records the kid zone writes to our servers are two anonymous town-wide day counters — a daily visit tally and a daily collective spark tally — that carry no user reference or identifier of any kind and are retained as aggregate statistics under Article 6.

ARTICLE 6 — DE-IDENTIFIED AND AGGREGATED INFORMATION

We may retain information that has been aggregated or de-identified so that it can no longer reasonably be linked to you or your Child, and we will not attempt to re-identify it.

ARTICLE 7 — RELATED POLICIES AND CHANGES

7.1 This Policy should be read together with the ORYN QUEST — PRIVACY POLICY, the ORYN QUEST — CHILDREN'S PRIVACY POLICY, and the ORYN QUEST — COOKIE POLICY.

7.2 We may update this Policy from time to time, including to add automated retention schedules. When we do, we will revise the "Last Updated" date and version above, and material changes will be presented through the Platform's versioned consent system and, where appropriate, by notice through the Platform or by email.

ARTICLE 8 — CONTACT

Questions about retention or deletion may be directed to:

ORYN Quest, Inc. Email: support@orynquest.com Website: https://orynquest.com

END OF DATA RETENTION POLICY