Our principle: keep less
Sorin is built for children, so we collect as little as we need and we do not keep it forever. Limiting how long data lives is a privacy and security measure: data that no longer exists cannot be exposed, misused, or breached. The retention rules below are a firm part of how the product works.
What we keep, and for how long
| Data | Default retention | Notes |
|---|---|---|
| Chat conversations and messages | 12 months of inactivity | A conversation untouched for 12 months is deleted in full. Active conversations are kept. Parents can choose a shorter window or "keep forever." |
| Read-aloud audio (text-to-speech) | 15 days | Generated only when used. Stored privately and deleted automatically. |
| Uploaded and generated images | Tied to the conversation | Removed when the conversation is deleted (by retention, by you, or on account deletion). |
| Safety alerts | With the child's record | Available to parents for review; removed on child or account deletion. |
| Account and billing records | While your account is active | Removed on account deletion, except records we must keep for legal or financial reasons. |
Chat retention, in detail
- The default window is 12 months of inactivity, measured per conversation.
- A daily process removes conversations that have passed the window, along with their messages, any images, and any cached read-aloud audio.
- Retention is by inactivity, so an ongoing conversation is never trimmed in the middle. Only conversations no one has touched for the full window are removed.
- Deletion is permanent. Once a conversation is removed it cannot be recovered.
Your controls as a parent
You are always in control of your family's data:
- Set your retention window. Choose a shorter period (for example 3 or 6 months) or "keep forever" in Settings → Privacy & Data. Your choice applies to all of your children.
- Delete a child profile. This removes that child's conversations, messages, images, sessions, and safety records.
- Delete your account. This removes your profile and all associated family data, except anything we are legally required to retain.
Read-aloud audio
When your child has Sorin read a reply out loud, the audio is generated on demand, stored privately, served through short-lived links, and automatically deleted after 15 days. We do not build a permanent archive of spoken audio.
A note on privacy by design
Sorin's Aegis engine keeps your child's personal details out of the AI model in the first place. Retention limits go a step further by making sure the conversation records themselves do not linger indefinitely. The idea is simple: a learning companion doesn't need to remember a child forever to be helpful today.
Questions
For questions about data retention or to request deletion, contact sorin@whitegloveai.com.