Data Retention Policy

1. Overview

This Data Retention Policy explains how long Oceansix Labs (Pty) Ltd ("Oceansix", "we", "us", or "our") retains personal information collected through the Oceansix My Aqua Android application ("My Aqua" or the "App"). It should be read together with our Privacy Policy and Terms of Use.

We retain personal information only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal obligations, or to protect our legitimate interests. The specific retention periods are set out below.

2. Account Profile Data

Your display name, email address, and country are retained for the lifetime of your account. When you delete your account, this information is permanently removed from our active systems within 30 days.

If you change your email address, the previous address is replaced upon successful verification of the new address and is not retained thereafter.

3. Authentication and Security Records

Records of sign-in activity, failed authentication attempts, and password changes are retained for up to 12 months from the date of the event. These records are used to detect and respond to unauthorised access, investigate security incidents, and protect the integrity of the service.

Upon account deletion, authentication records are removed within 90 days, unless retention is required to investigate or resolve a security matter that was active at the time of deletion.

4. Email Verification and Password Reset Records

Verification codes and password-reset tokens are short-lived and expire automatically, typically within 24 hours of issue. Once expired or used, the token value is invalidated and is not retained in usable form.

A minimal record that a verification or reset event occurred (timestamp and outcome) may be retained as part of authentication logs for the period described in section 3.

5. Consent Records

Records of your acceptance of the Terms of Use and your marketing-consent preference are retained for as long as your account exists. Upon account deletion, consent records are retained for a further 36 months to enable us to demonstrate compliance with applicable data-protection requirements, including the Protection of Personal Information Act (POPIA), should a query or dispute arise.

6. Support Communications

If you contact us at hello@oceansix.co.za, we retain the correspondence for up to 24 months after the matter is resolved. This allows us to provide continuity of support and to maintain a record in case of related follow-up enquiries or disputes.

7. Technical and Operational Logs

Server-side logs — including request timestamps, error details, and general device information — are retained for up to 90 days. These logs are used for monitoring service health, diagnosing technical issues, and maintaining the security of the platform.

Logs are stored in a form that may include identifiers linked to your account. After the retention period, logs are automatically purged or anonymised.

8. Account Deletion

You may delete your account at any time through the App. Account deletion is permanent and cannot be reversed. Upon deletion:

• Profile data and user content are permanently removed from active systems within 30 days.
• Authentication and security records are removed within 90 days, subject to any active security investigation.
• Consent records are retained for 36 months for compliance purposes, as described in section 5.
• Technical logs containing account identifiers are purged or anonymised according to their standard retention cycle (up to 90 days).

Residual copies may exist temporarily in encrypted backup systems and will be overwritten through the normal backup rotation cycle.

9. Changes to This Policy

We may update this Data Retention Policy from time to time. When we make material changes, we will notify registered users via email and update the effective date at the top of this page.

10. Contact Us

If you have any questions about this Data Retention Policy, please contact us at:

Oceansix Labs (Pty) Ltd
Email: hello@oceansix.co.za