Deleting your account

Open Settings and scroll to Delete account. It takes a few steps, so someone who picks up your unlocked phone cannot do it:

1. Delete my account emails a six-digit code and a link to the address on your account. Type the code into the app, or open the link; either works for 30 minutes.
2. The app asks you to confirm, and then asks why (you can skip that).
3. A last confirmation, where you press and hold until the button fills.
4. Unless you signed in within the last 15 minutes, you confirm it is you with a passkey, your password, or the Google, Facebook or Apple account you sign in with, plus your authenticator code if two-factor is on.

You then have 30 days to change your mind. The account is closed at once: it is signed out on every device and cannot be used for anything, and each of your other devices says so, with the date it is deleted for good, the next time it is opened. On the 30th day it is erased automatically.

To call it off, sign in again before that date. The app shows how long is left and a Recover account button; press it and everything is as it was. Signing in alone changes nothing, so if you sign in and leave without recovering, the countdown keeps running. We email you when you ask, with the date on it, and again if you recover.

Delete your account as above, then sign in again. Below the countdown is Slide, then hold to delete now: slide it all the way across and keep holding for five seconds. The account is shut that moment and erased in the minutes that follow, and everything below goes then rather than on the 30th day. There is no way back from that one. If you changed your email address in the last seven days, this option waits until that week is over, so the old address can still undo the change; the 30-day deletion keeps its date.

The 30 days protect you from a mis-tap. If you want your data gone today, use this, and we will not ask why. It sits on the countdown, not beside the delete button, so nobody picks it by accident.

Write to support@maliko.ca from the address on your account, with the word delete in the subject. If you cannot send from that address, or you used EvenHearth as a Guest and never gave us one, say so, and we will work out how to identify you without it.

We act on the request within 30 days and confirm when it is done. We will only come back to you first if we cannot tell which account is yours. Say so if you want it erased without the usual waiting period.

Your account and the details that identify you: your sign-in and password, your email address, your name, your contacts, your notification preferences, and every session and device registration behind them. Passkeys, two-factor secrets and recovery codes go with them.

Any household where you are the only member is deleted outright, along with its ledger, its receipts and the photographs behind them.

In a household you share with other people, your entries stay. Your name comes off them and is replaced with a neutral label, but the amounts, the splits and both sides of every settlement remain.

Other people's balances are worked out from those records. Deleting your half would change what everyone else is owed, months after they agreed it. Your right to erasure covers your personal information, not other people's financial records.

So your name goes and the amounts stay, and nobody's balance moves.

Some records outlast your account, each for the reason and the period Data retention gives:

• what was charged and refunded, for six years, as tax law requires;
• a keyed hash of your email address and the date of any free trial, for 24 months, so a new account does not get a second trial;
• an address that unsubscribed from our emails, so it is never mailed again;
• our staff audit log, for 24 months.

Stripe keeps its own record of your payments, under its own privacy policy.

You will be asked to hand it to somebody else first, in Household settings. A household with no Owner cannot close a month, change its split or settle up, so everyone else would be stuck.

If you are the Owner and cannot reach the app, say so in your email and we will arrange the handover as part of the request.

Export first if you want a copy. Settings has an Export everything option that returns the records of every household you are in. Once the account is deleted there is nothing to export and nothing to restore from.

Deleted data disappears from our backups as those backups expire on their normal schedule, within 100 days. We do not restore a backup to recover deleted data; Data retention sets out the schedule.

Asking to delete your account stops your plan from renewing. You keep it, and so does any household it covers, until the end of the period you have already paid for, and nothing more is charged. This applies to every plan, Founders included. If you recover your account before the 30th day, the plan does not start renewing again: subscribe again on the Plan screen if you want it to continue. Deleting the app alone stops nothing.

support@maliko.ca