03 Data types and retention
Every category, line by line
Deleted means removed from our systems. Anonymized means the record survives but no longer
identifies you. Kept means retained in full, for the
reason given.
| Data | Staff request | Owner request | Retention |
| Account and sign-in credentials | Deleted | Deleted | Removed from our authentication provider within 30 days |
| Name, email, phone, address, profile photo | Deleted | Deleted | Within 30 days |
| Notification preferences and registered devices | Deleted | Deleted | Within 30 days |
| Location captured when confirming arrival for a shift | Deleted | Deleted | Within 30 days |
| Certification records held for inspection | Anonymized | Deleted | Retained by the facility while it must evidence certified supervision |
| Shifts, time-clock punches and schedule history | Anonymized | Deleted | Retained by the facility as an employment and staffing record |
| Chemical readings and maintenance logs | Anonymized | Deleted | Retained by the facility for at least 12 months where state pool rules require it |
| Incident and accident reports | Anonymized | Deleted | Retained by the facility for as long as the reporting and liability rules that apply to it require |
| Uploaded files, documents and issued certificates | Deleted | Deleted | Removed from file storage within 30 days |
| Billing and payment records | Kept | Kept | Retained for as long as tax and accounting law requires; held by our payment processor and never including full card numbers |
| Support email correspondence | Kept | Kept | Retained for up to 24 months, then deleted |
| Security and audit logs | Kept | Kept | Retained in de-identified form for fraud prevention and security investigation |
| Encrypted backups | Deleted | Deleted | Deleted data ages out with the backup that contains it, on a rolling cycle; backups are never restored to re-create a deleted account |
Timing
We complete deletion within 30 days of verifying your
request, and email you when it is finished. Between the request and that
confirmation your account still works, so you can export anything you
want to keep. Data already deleted may persist briefly in encrypted
backups until those backups age out on their normal cycle; we never
restore a backup in order to bring a deleted account back.
If you only want to leave a facility
You do not need to delete your account to stop working somewhere. Ask
that facility's manager to remove you from their Aqua Mage account — your
access ends immediately and your login stays yours for your next
employer. Deleting the account is the heavier option, and it is
permanent.
Questions before you decide
Write to support@aquamage.com and
ask — a question is not a deletion request, and we will not treat it as
one. For how we handle data generally, see our Privacy Policy.
Aqua Mage is operated by Aquatic Aces LLC. This page covers deletion for
the Aqua Mage Android app (com.aquamage.app) and the Aqua Mage web
application.