Active, archived and deleted classes
Active
The class and its data remain available for normal teaching and assessment use.
Archived
Keep the class and its data, but close it and move it out of normal active use.
The class becomes review-only. Student activity and class changes stop until the Course Owner restores it.
Deleted
Permanently delete the class and the data that belongs specifically to that class, subject only to limited technical, legal, backup or security retention where applicable.
Archive is not deletion. TAIF currently allows the Course Owner to restore an archived class. Permanent deletion cannot be undone through the product.
What class deletion includes
TAIF’s current deletion process removes the selected class and its class-specific:
- class configuration and instructor access records;
- roster, encrypted learner-identifier mappings, learner-verification, removed-member, team and team membership records;
- assessments, questions, answer options and explanations;
- team assignments, attempts, answers, scores and progress;
- individual think responses and post-assessment reflections;
- team session, stage and incident records; and
- class-specific audit activity.
Privacy mode labels, device sessions, participation declarations, attempts and results follow the same class archive and deletion process. Closing an activity keeps its results. Resetting or releasing a privacy device revokes its previous session access; it does not delete the instructor’s locally held identity mapping, which TAIF never receives.
Roster removal restricts the existing learner record; it is not a complete erasure or a permission-withdrawal procedure. Contact TAIF for a support restriction when re-entry through Open participation or a new import must also be prevented. The protected identifier mapping may remain where needed to preserve existing assessment and export records. Deleting the class removes its class-specific encrypted learner-identifier mappings and verification records through TAIF's deletion process, subject to the limited backup, recovery, legal and institutional-record exceptions described above.
TAIF does not currently have a separate shared question-bank record outside a class. User accounts and unrelated classes are not removed by class deletion.
Account deletion and institutional records
Deleting a user account and deleting institutional assessment records are not always the same thing.
A student’s request to delete an account does not necessarily mean that an institution must delete legitimate academic or assessment records that it is entitled or required to retain.
TAIF currently does not create standalone student login accounts. Student identity and activity are held within class, team and assessment records. A student should contact the relevant instructor, institution or TAIF privacy contact about access, correction or deletion.
When an instructor deletes their TAIF account, the current product removes their credentials and personal profile identity, removes their class memberships, and replaces their identity in preserved shared history with “Deleted user”. A shared class passes to an existing instructor where possible; an owned class with no other instructor is archived. This account action does not erase shared class or assessment records.
Platform administrators can permanently remove an instructor together with every class they own, including archived classes, or transfer those classes to an eligible active instructor and preserve their teaching records. Classes owned by other instructors remain. Credentials and personal profile details are removed; a minimal anonymous history record preserves shared records and past approvals. Removing an administrator also permanently revokes their grant, including after re-registration.
Instructor control in TAIF
The current product gives the Course Owner the ability to archive, restore or permanently delete a class from Class Settings. Co-instructors, Teaching Assistants and Viewers cannot perform those class-retention actions.
Platform administrators can review and permanently delete any class across workspaces after confirming the impact, exact class name and reason. Active retention holds block permanent class deletion by instructors and administrators until expiry or documented administrator release. Applicable institutional and legal retention duties must be reviewed before deletion. A minimal administrator audit record is retained.
Archived classes remain available for review and authorised CSV export. The class must be restored before new teaching or student assessment activity can resume.
Other product controls—such as closing an assessment, removing a roster member or deleting an unused team—are narrower actions and are not the same as deleting a class.
Missing or withdrawn permission
TAIF support may place a class on hold while reviewing missing authority, withdrawn permission or unsupported participation. The hold stops new and existing learner activity, including Privacy mode and Open participation, and prevents ordinary instructor confirmation or reimport from restoring access. Support clearance requires review, followed by fresh instructor authority.
Restriction does not erase information. TAIF and the authorised record holders review active learner records, shared assessment results, exports and recovery copies separately. Records are deleted or corrected where required; any limited retention must have a documented purpose and period. Removing one learner is not the same as deleting their attempts, shared marks, reflections, identifiers or downloads. Downloaded exports and mappings held outside TAIF must be handled by their holders.
Minimal confirmation evidence is retained with the associated class while its assessment records are kept, and is deleted with class deletion. Educator acceptance evidence follows educator-record retention and applicable account deletion handling. Detailed support cases have a documented case-specific retention decision and restricted access; parental documents are not routinely stored in TAIF.
Before restored data is made usable, support must reapply completed holds and deletion decisions. Recovery copies follow the provider recovery window rather than a promise of instant destruction.
Backups and future retention periods
TAIF's production database runs under an active Cloudflare Workers Paid subscription. Cloudflare D1 Time Travel provides a 30-day point-in-time recovery window. Information deleted from the active application may remain recoverable during that window, but it is not available for ordinary product use unless the database is restored.
If TAIF changes hosting providers, encrypted application data and its protection keys are transferred separately, the restored records are checked, and protection keys may be rotated after migration. Deletion from the former provider remains subject to its documented backup and recovery cycle.
TAIF does not currently apply an automatic deletion period to active or archived class records. The Course Owner currently controls class archive and deletion. For an institutional deployment, TAIF and the institution should agree a documented retention schedule, deletion responsibilities and an exit or migration process before go-live.
TAIF may introduce defined retention periods as the service develops. Any material changes will be reflected in this policy and in the product where appropriate.
For questions about a particular record, see Your rights in the Privacy Notice or the Contact & Legal Information page.