Ado
Start here

Delete your account or a child’s data

Every Ado profile belongs to an account: a parent’s, or a student’s aged 18–22. The account holder deletes it in the app, on a phone, a tablet or in a browser.

Open Ado

Delete one child’s data

  1. Open Ado on a device signed in to your account.
  2. Open “Settings” and choose the child under Players.
  3. Press “Delete this player” and confirm.

Delete your whole account

  1. Open Ado on a device signed in to your account.
  2. Open “Settings”.
  3. Press “Delete the account” and confirm. This deletes your account and every profile on it.

If you are 18–22 and hold your own account

  1. Open Ado on a device signed in to your account.
  2. Open “Settings” and choose your profile.
  3. Press “Delete my profile” and confirm. To delete your account as well, follow the steps above.

When it happens

Deletion runs 48 hours after you ask, so you can cancel it from the same page until then.

When it runs, the profile’s devices stop working, and its PIN, date of birth, country, device links, friends and play history are deleted. Deleting the account also deletes your sign-in and email.

A membership bought in the browser is cancelled when your account is deleted. One bought in the App Store or Google Play is cancelled in that store’s subscription settings; deleting your account does not cancel it there, so cancel it first.

What we keep, and why

A few records are kept after deletion because the law asks for them, or are kept with every personal field removed so other players’ results stay correct. This list is generated from our data inventory.

About the account holder

  • guardians Personal fields removed; the row stays without them

    The account holder: a parent (for players 6–22 on a family account) or a student aged 18–22 for themself — sign-in, verifiable consent and reports.

    Until erasure is requested; pseudonymised then. The auth id is nulled once the sign-in identity is deleted (within hours).

  • consents Kept as a legal record

    Append-only record of each parental consent granted or withdrawn, with the notice hash.

    Kept for 3 years after erasure as proof of consent (DPDP s.6(10)).

  • erasure_requests Kept as a legal record

    A parent’s request to erase a child or the whole account, with its 48-hour notice.

    Kept for 3 years as the record that erasure was requested and completed.

  • item_reviews Kept as a legal record

    Append-only record of every AI verdict and human review of content kids see.

    Kept for 3 years: the audit of who approved what children were shown. Holds no personal data beyond the reviewer id.

  • teachers Personal fields removed; the row stays without them

    Teacher accounts: a self-serve teacher who signed up on the web (no school), or an older school invite and the sign-in it became.

    While the teacher account is live; pseudonymised on erasure.

  • subscriptions Kept as a legal record

    An account holder’s membership subscription at Razorpay, the App Store or Google Play: plan, status, billing period and the profile an individual plan covers. Never a card, VPA, bank detail or contact.

    Kept for 8 years after erasure as the record behind the payments (tax and accounting law).

  • payments Kept as a legal record

    Append-only ledger of membership charges, refunds and chargebacks: provider ids and the amount in paise. Never a card, VPA, bank detail or contact.

    Kept for 8 years after erasure (tax and accounting law).

  • billing_events Kept as a legal record

    Append-only receipt of each signed billing event from Razorpay, Apple or Google: its id, type, outcome and a hash of the body (never the body), so every delivery applies once.

    Kept for 8 years after erasure with the payments it explains.

  • grievance_tickets Personal fields removed; the row stays without them

    A grievance or a data-principal request (access, correction, erasure, nomination, consent, an age concern, a breach), answered within 90 days.

    Kept as the record of the request and its answer. The contact email and any requested correction are removed 90 days after it is resolved, and on erasure; on erasure the request and the reply text go too, and the outcome code stays. The record is kept for 3 years after it is resolved.

  • age_claim_reviews Kept as a legal record

    A review of a self-declared adult age that may be under 18, and its decision (keys only).

    Kept for 3 years as the record of the decision.

About a profile

  • kids Personal fields removed; the row stays without them

    The player profile: age band, handle, an optional name (a first name; a player 18–22 may add a last name), a PIN when the account holds two or more players, school board and class (under 18), optional country and friend code, and when a player 18–22 on a family account agreed for themself (a family account’s player 6–22, or a self-managed student 18–22).

    Until erasure is requested; pseudonymised then so shared league results stay consistent.

  • submissions Personal fields removed; the row stays without them

    A child’s hypothetical answers and art uploads, moderated before anyone sees them.

    Until erasure; then the content and the child link are removed and an empty row remains so other children’s votes stay consistent. Photo originals expire after 90 days.

  • reports Kept as a legal record

    Reports a child made about other children’s content, with a closed reason list.

    Kept for 3 years after erasure as the safety record (24-hour SLA).

  • moderation_events Kept as a legal record

    Append-only record of every moderation decision on a child’s content (no content).

    Kept for 3 years after erasure, as the safety record of every moderation decision.

Cannot sign in? Write to hi@getado.app from the email address on the account, and we will help you delete it.

Everything we store, and for how long