What we hold about you, and how to take it back

Everything in your ledger is yours — we only hold it while you need us to, and you can leave with nothing left behind. Here’s the whole of what we keep: your name, email and phone; your accounts, transactions, debts, budget and goals; and an encrypted key per connected bank. Not your bank password — that goes to Plaid and never reaches us.

Deleting everything

Settings → Security → Delete account. You re-enter your password, and then it removes your profile photo, releases every bank connection at Plaid, and deletes your profile, accounts, transactions, debts, budget and goals.

It is permanent and we cannot undo it. The Plaid step happens first on purpose: the keys that release those connections live on the rows being deleted, so doing it the other way would leave your banks connected to an account that no longer exists.

You don’t need to ask us, and there’s no waiting period. If you can’t get into your account, email us from the address on it and we’ll do it.

Exporting

Only partly, today. You can export a payoff schedule as CSV from the Debt Payoff Goal tab, but not your register or your budget. Bulk export is on the list, and we’d rather you know that going in than find out when you need it.

Disconnecting one bank instead

If you only want one institution gone, disconnect it from Settings → Bank Connections. Be aware that this also deletes that bank’s accounts, transactions and imported debts — see Keeping your data current.

The longer version

Our Privacy Policy is the formal account, and the Security page explains how bank connections work in plain terms. A ledger keeps watch over what’s been entrusted to you — this one is yours, and holding it for you is a trust we try to be faithful with, right up to the moment you ask for it back.