Effective September 26, 2026 · Version 2026-09-26.1
This schedule supplements Privacy and Consumer Health Data Privacy. It describes ordinary maximum periods, subject to earlier account deletion, a valid privacy request, a documented legal hold or a specific mandatory recordkeeping duty. A retention exception is not permission for unrelated use. The provider is Udom Software LLC, a Nevada limited liability company, doing business as Lessen, 732 South 6th Street, Suite N, Las Vegas, NV 89101. Email: admin@lessen.app.
1. Account-linked application records
Normalized betting history, setup answers, profiles, goals, money goals, days the app was opened, protection steps marked done, interventions, screening histories, calculated metrics, connected-account references and active sharing information are ordinarily kept while the account exists, because they support the user's ongoing history and service. Account deletion removes these application records. Disconnecting a sportsbook alone does not delete the historical record. Consent withdrawal stops the optional activity to which it relates.
2. Time-limited operational records
| Record | Ordinary period | Purpose |
|---|---|---|
| Original sportsbook payload versions | Up to 1,095 days from receipt, or earlier account deletion | Reconcile corrected source data and investigate calculations |
| Refresh planning and request records | 180 days, or earlier account deletion | Reliability and provider reconciliation |
| Product/consent event log | 730 days, or earlier account deletion subject to necessary legal evidence | Account operation, consent history and reliability |
| Risk-window occurrence records | 730 days after the window, or earlier account deletion | Evaluate predictions and outcomes |
| Shared-page view records | 730 days, or earlier source-account deletion | Access and consent history and authorized historical views |
| Recipient sessions | 30-day validity; removed by 45 days, or earlier revocation | Secure continued access |
| Sharing-code attempt records | 30 days | Detect guessing and abuse |
| Portal client-place counts | 30 days after last opening | Apply the practice's rolling allowance |
| Portal rate-limit buckets | Two days | Prevent request abuse |
| Ended/expired staff invitations | 30 days after the relevant ending event | Invitation administration |
| Completed portal payment-event deduplication records | 90 days | Prevent duplicate processing |
| Accepted or superseded clinic decision-email records | 90 days | Delivery troubleshooting and preventing repeats |
| Provider deletion-obligation records | Up to 1,095 days; unresolved obligations remain subject to review | Complete and document upstream deletion requests |
Deletion of a source account removes its identifiable patient reference from retained portal count records. An unresolved email-delivery record is retained while it needs action; account deletion removes its recipient record. Failure queues and legal holds must be reviewed, not treated as a reason to retain all underlying health information indefinitely.
3. Business, billing and consent records
Practice identity and anti-duplicate records support one business account across ownership changes. They do not contain a copy of the patient's health page. We keep them while the business uses the portal and retain only the minimum justified record afterward for fraud prevention, a dispute or a legal obligation. Support, privacy-request, transaction and financial records are retained according to the duty and purpose involved, ordinarily no longer than seven years where tax, accounting or legal-claim records require that period. We minimize sensitive content, periodically review these records and delete them when the purpose ends. This business-record rule does not extend ordinary patient-history retention.
Recorded account Terms agreements remain associated with the account while it exists. We may preserve limited evidence separately where needed for a concrete legal duty or dispute. A legally required consumer health-data sale authorization, if a future program is activated, must be retained for the statutory period, including six years where Washington law requires it. No general research preference is treated as that authorization.
4. Research and AI
External research releases are disabled. Coded snapshot rows held by Lessen are deleted when the account is deleted or research permission is withdrawn. An immutable research-copy rule does not override a privacy erasure. A future research program must have a documented retention and recipient-deletion plan before release.
Lessen's application database does not retain Les conversation transcripts. Optional history stays on the device until cleared or removed with app/account data. Limited content-free usage and safety records follow their operational purpose. Anthropic generally deletes ordinary API inputs and outputs within 30 days, subject to legal, safety and contractual exceptions described in its retention notice.
5. Backups and other providers
On September 8, 2026, the application database project's backup interface reported no stored project backups. As of September 25, 2026, it keeps an automatic backup of the database once a day and holds each one for about seven days; point-in-time recovery is off. Information deleted from the live database can remain in those backups until they expire, about seven days later, and backups are used only to recover from a failure. That is not a claim that no infrastructure log, provider record or device copy exists. Deleted information must not reappear in ordinary use after a restore; erasures must be reapplied. Statutory deadlines control, including any applicable outside deadline for archived consumer health data.
Apple, Google and Stripe retain their payment records under their own legal duties and notices. Authentication, hosting, email, push and connection providers may retain logs or records under their applicable contracts and notices. We seek deletion or restricted processing where required. SharpSports currently has no automated deletion endpoint available to Lessen; we record the obligation separately from switching off connection access. A recorded obligation is not proof that SharpSports erased its copy. Requests requiring provider action must be followed through by the business.
6. Requests and holds
Use in-app deletion/export controls or email admin@lessen.app. We aim to respond to privacy requests within 45 days, sooner where required, with any lawful extension explained in time. Deletion from backups and recipients follows applicable law, not an unconditional promise of instant erasure everywhere. We do not deny a right simply because a table is described as an audit or research table. If retention is legally necessary, we limit it to the information and time required and explain the basis when permitted.
Consumer website setup and trial records
Setup answers and the saved step stay with the consumer account and are removed when the account is deleted. A one-way representation of the normalized email is retained for up to one year after a trial claim to prevent repeated trials. This is personal information, not anonymous data. Minimal Stripe customer references remain while an account-deletion cancellation is unfinished so failed cancellations can be retried. Stripe retains its own payment records under its policies and legal duties.