Moodle stores the prompt, generated content and other information in the ai_action_generate_image, ai_action_generate_text, ai_action_summarise_text and ai_action_register tables. The data is never deleted except by the Privacy API (when a user or all user data in a context is deleted). However, the Privacy API implementation does not even delete all data (it only clears some of the fields), which makes it not GDPR-compliant, unnecessarily blows up the database over time and leaves broken foreign keys when a context gets deleted.

I think it would be good to have two new global settings:

• Retention time for database fields that might contain very personal data (prompt, generatedcontent, etc.). 0 disables saving of the data.
• Retention time for all database rows in the tables listed above.