Halaman ini merupakan terjemahan yang disediakan agar dapat dibaca. Versi bahasa Inggris-lah yang berlaku secara hukum. You can delete everything Leila knows about your family yourself, from inside the app, without asking us and without waiting for anybody. This page explains how, what goes, what we are legally required to keep, and how long each step takes.
Open Leila, go to Settings and choose Delete my account. Leila stops reading your mail that day, every brief stops, and your household disappears from the app at once. Seven days later it is erased for good.
Those seven days exist so that a mis-tap does not cost a family a term's worth of school logistics. You can undo the deletion from the same screen at any point before the deadline, and after it nothing can be recovered — not by you and not by us.
If you cannot get into the app, write to privacy@hileila.com from the address on the account. See section 9.
Settings, then Delete my account. You will be told the exact date your record is erased, and you can cancel until then.
What happens immediately, before the seven days start: the address you forward school mail to is revoked, so nothing further is accepted. Your household is hidden from the app. No brief, caregiver message or reply goes out again.
Export everything first if you want a copy: Settings, then export. You get a JSON file containing your household, your children's records, every message Leila read, and the actions she took. Raw message bodies are included — they are your own mail, and an export that left out the source of every claim would be a summary rather than your data.
Deletion does not require you to contact support, speak to anyone, or give a reason. If you ever find that it does, that is a bug and we want to hear about it.
Write to privacy@hileila.com from the email address on the account. Say that you want the account deleted. You do not need to explain why.
We will confirm within 30 days, and in practice much sooner. If it is going to take longer than 30 days we will tell you before that deadline, and why.
Your account and sign-in details. Your household, every adult on it and every child record, including names, year groups, schools, allergies and anything else you told us.
Every message Leila read, whether it was forwarded to your Leila address or read from a mailbox you connected, together with the summaries and actions she produced from it.
Every mailbox and calendar connection, and the tokens behind them. We also tell the provider to revoke the connection at their end, so it is not left live in an account you no longer use.
Every school portal credential, erased rather than marked inactive. Every caregiver you added and their messaging history with Leila. Your delivery preferences, your device push tokens and your saved settings.
Leila learns things about schools from what families forward — a term date, a uniform rule, which gate Year 3 uses. Where many unrelated families have corroborated the same fact, that fact is not any one household's to withdraw.
So deleting your account withdraws your contribution rather than the fact: the record linking you to it is destroyed, and the count of families who confirmed it drops by one. A fact that only you ever contributed falls back below the threshold at which Leila will state it, automatically, which is what erasure should do.
Nothing in this shared knowledge identifies you, your children or your household. It is about schools, not about families.
Payment and tax records: 5 years. UAE tax law requires it and we cannot waive it on request. These are invoice and transaction records — amount, date, tax treatment. They are not your family's information, and they are not used for anything else.
Support correspondence: 2 years, and only where you wrote to us. If you ask, we will delete the body of it sooner and keep only the fact that a conversation happened.
A record that an account with your email address existed and was deleted, so that we can answer honestly if you or a regulator later ask us whether we still hold anything. This is one row holding a hashed address and a date.
Nothing in this section can be used to rebuild your household, your children's records or any message Leila read. Those are gone.
Out of the app, and out of reach of our own systems: the moment you confirm. Ingestion stops, your forwarding address is revoked and the household is hidden.
Irreversibly erased: 7 days after you confirm, unless you cancel first. This is the window described in section 1. A scheduled purge does the irreversible work; there is no manual step on our side that could be forgotten.
From our backups: within 35 days of the erasure. Backups exist so that a failure on our side does not cost you your data, and they are overwritten on a rolling cycle rather than edited. Nothing is ever restored from a backup into the live system after an erasure.
From our processors: we instruct each of them when the erasure runs. Most act within days. Where one holds data under its own retention obligation, section 5 applies to them in the same way.
You do not have to delete the whole account to remove something. A child record, a connected mailbox, a school portal, a caregiver, a single message and its summary can each be deleted on their own from Settings, and each takes effect immediately.
Disconnecting a mailbox deletes the connection and the token. Disconnecting a school portal deletes the stored username and password outright. Neither leaves a dormant copy behind.
Deleting your Leila account deletes everything Leila holds, including the link to whichever sign-in you used. We do not keep a shadow profile tied to that identity.
Deleting your Leila account does not delete anything held by Apple, Google or Meta — their copies are governed by their own policies, not ours. If you also want to revoke Leila's access at their end, you can do that in your Apple ID settings, your Google account permissions, or your WhatsApp linked-business settings.
Removing Leila's permission at their end stops any future access but does not by itself delete what we already hold. To delete that, use section 2 or section 3.
Write to privacy@hileila.com from the address you believe is on the account. If that address no longer works, write from any address and tell us as much as you can about the account.
We will ask you to verify that the account is yours before we delete it. That is a protection for you: an account holding your children's information should not be deletable by anyone who knows your email address. We will not make it harder than it needs to be, and we will not charge you.
A child record can be deleted on its own, from Settings, without affecting the rest of the household. Everything Leila derived from it goes with it.
If you are a parent or guardian and you want us to remove a child's information from an account you do not control, write to privacy@hileila.com. We will act on it, and we will tell the account holder that we have.
For a deletion you perform yourself in the app: nothing beyond being signed in.
For a deletion we perform for you: enough to be satisfied that the account is yours. We will not ask for a copy of your passport, a utility bill, or anything disproportionate to confirming an email address.
Write to privacy@hileila.com and say so. We will check and answer.
If you are not satisfied with our answer, you can complain to the UAE Data Office. You do not have to come to us first, but we would rather you did, because we can usually fix it faster.
Gridwork Ltd (licence 07011194), of Office A, Innovation Business Center, RAK BANK ROC Office, Ground Floor, Al Rifaa, Sheikh Mohammed Bin Zayed Road, Ras Al Khaimah, United Arab Emirates.
Data protection contact: privacy@hileila.com. This page sits alongside our privacy policy, which describes what we collect in the first place and why.