Skip to main content

Retention Review

Set how long the privacy log is kept and review every deletion notice

How long the record is kept

The privacy activity log deletes itself on these rules. Permission changes are the record of what you agreed to, so they are kept longer than the app's refusals, which are mostly useful while something is going wrong. Everything here stays on this device.

What these rules would delete now

0 records stored. Nothing is due for deletion.

Retention notices

One entry for every deletion, and for every change to the rules above. Notices can only be added — there is no way to edit or remove one from inside the app — and each is sealed against the one before it, so an alteration made outside the app shows up as a failed check rather than passing unnoticed. A notice records counts and dates only, never a reading and never which action was refused.

No notices yet. Nothing has been deleted on this device.

Review a date range for unusual patterns

Pick a range and this reads the activity log for shapes a person is unlikely to produce — a permission flipped repeatedly in minutes, refusals repeating at machine speed, activity in the small hours, or a permission that keeps being asked for while it is switched off. Counts only: no reading, no timestamp, no name ever leaves this device.

0 recorded events over 30 days — 0 permission changes and 0 blocked actions.

The reviewer is switched off

This uses the same permission as the written health briefing. The counts above are already worked out on this device — turning the permission on only allows them to be sent for interpretation.

Open permissions

The switches themselves, and the log these rules apply to, are on the permissions page.