# Caches and personal data

**Not built.** This page is the design; Jadpo doesn't do this yet. See [What is built](/docs/data-built.md).

A [cache](/docs/caches.md) never lets a caller around policy. A record
cache applies policy on every read. A query-result cache is keyed by the
tenant and every input policy used. Policy itself always reads the
database.

[Personal data](/docs/personal-data.md) takes its permissions from policy:
erasing a person's data needs `delete` on their record, and exporting it
needs `read`.