Data Retention Schedule
Version 2026.10 · Last updated 14 October 2026
About this schedule
This schedule lists how long We Lead Sdn Bhd keeps each kind of personal data for murid-murid, and what happens when that time is up. It is part of our Privacy Notice.
We keep personal data only as long as we need it for the purpose we collected it for, or as long as the law requires. Where a row says "We are changing this", the rule shown is the one we are introducing, and the note explains what happens today.
The murid-murid app
Accounts
| Data | How long we keep it | What happens then |
|---|---|---|
| Active parent and student accounts, child profiles and learning data | While the account is active | See the rows below. |
| Inactive accounts (no sign-in for 24 months) | 24 months after the last sign-in. We send a warning email at 22 months. | The account is deleted, following the rules for deleted accounts. We are changing this: this rule is being introduced. |
| Deleted accounts | Sign-in deleted at once; data kept for 30 days | Permanently erased 30 days after the deletion. A deletion cannot be undone, and nobody can sign back in. |
| A child profile removed by a parent | Not kept | Deleted permanently and immediately. |
| Learning sessions, challenge results and skip-exam attempts | While the account exists | Anonymised when the account is erased. We are changing this: today some of these records are kept after erasure. |
| Question reports a child sends us | While the account exists | Deleted with the account. An anonymised copy of the report text, with no account ID, may be kept to fix the question. We are changing this: today the reports are kept after erasure. |
Records we must keep
| Data | How long we keep it | Why |
|---|---|---|
| Minimal consent record: hashed identifiers, policy version, time and method of consent. No names. | 6 years | Legal proof that a parent gave consent. |
| Anything else the law requires us to keep | As the law requires | To meet our legal duties. |
Copies, logs and crash reports
| Data | How long we keep it | Notes |
|---|---|---|
| Backups | 30 days | Data in a backup is deleted when the backup expires. |
| Copies of the database taken before a release | 90 days | We are changing this: this limit is being introduced. |
| Server logs | 30 days | |
| Crash reports (Firebase Crashlytics) | 90 days | Kept by Google. |
Support and contact
| Data | How long we keep it | Notes |
|---|---|---|
| Support chats (including WhatsApp, with the photos, voice notes and files sent in them, and a note of calls) and emails | As long as we need them to help you, then deleted | You can ask us to delete them sooner. |
| Emails we send through Resend (delivery records) | 30 days |
Coming soon
These rows apply when the feature is available.
| Data | How long we keep it | Notes |
|---|---|---|
| Subscription status (RevenueCat) | While the account exists, then 7 years for payment and tax records, as Malaysian company and tax law require | Payment records are kept by Apple or Google under their own policies. |
| AI study coach transcripts | 90 days, as text | Needs a separate parent consent for each child. |
| AI study coach homework photos | 30 days | Needs a separate parent consent for each child. |
Our website, waitlist and advertising pages
| Data | How long we keep it | Notes |
|---|---|---|
| Waitlist and campaign form submissions | As long as we need them for the purposes in the Privacy Notice, then deleted or anonymised | You can ask us to delete them sooner. |
| Record and summary of a visit to an advertising page, with the IP address and location stored with it | As long as we need it to measure our advertising, then deleted or anonymised | You can ask us to delete it sooner. |
| Two random identifiers stored in your browser | One until you close the tab; the other has no expiry of its own and stays until you clear your browser's site data | Clearing your browser's site data removes both. Private or incognito browsing stops the longer one being kept. |
| Microsoft Clarity recordings on advertising pages | Recordings 30 days; heatmaps 13 months | |
| Quiz and past-paper page answers and details, and the parent's agreement | 24 months after the last contact, or sooner if the parent asks us to delete them | See the Privacy Notice, section 15. We keep the record of the parent's agreement for as long as we keep the details it covers. |
Anonymised data
When we anonymise data, we remove anything that could point to a person. Anonymised statistics are no longer personal data, so this schedule does not limit how long we keep them.
Questions
Email hello@murid-murid.com or message us on WhatsApp at +60 16-318 6410. Our Data Protection Officer can be reached at hello@murid-murid.com.