Delete your CVS Ledger account and data

1. Send an email from the same email address you use to sign in to CVS Ledger (your Clerk account email).
2. Use the subject line: Delete my account
3. In the body, include:
   • That you want your CVS Ledger account deleted
   • Whether you also want the entire household deleted (if you are the sole / remaining owner), or only your membership removed from a shared household
   • Your display name if you use more than one login method
4. Email the CVS Ledger operator using the contact method described in our Privacy Policy (§11 Contact)— typically the address you already use for CVS Ledger / Clerk support, with subject "Delete my account" or "Privacy request."
5. We will verify ownership of the account and complete the request. We aim to process verified requests within 30 days.

After a verified account deletion request, we delete or irreversibly remove:

• Your user profile linkage in CVS Ledger and household membership(s)
• Push notification tokens and notification preferences for your user in those households
• If you are the last owner and request household deletion: household expense data (transactions, accounts, budgets, categories, settings, imports, comments), bank connection records, and related tenant data cascading from that household
• Your Clerk authentication account (or we instruct you how to delete it in Clerk if deletion is performed there as part of the same request)

Some information may be kept for a limited time where required:

• Backups — short-term database backups held by our hosting providers may retain copies until those backups rotate (typically on the order of days to a few weeks, not indefinitely for active serving)
• Billing records — subscription / entitlement provider identifiers and related billing history may be retained as needed for tax, accounting, chargebacks, and legal compliance (Stripe, Google Play / RevenueCat). We do not store full card numbers
• Security / audit logs — limited operational or audit events may be retained for security and abuse prevention
• Shared household data — if you leave a household that other members still use, that household's transactions and settings remain for the remaining members; only your membership, tokens, and prefs for that household are removed

Deleting your CVS Ledger account does not automatically cancel a paid subscription billed by Google Play or Stripe. Cancel those separately:

• Android / Google Play — manage or cancel the subscription in Google Play subscriptions for CVS Ledger
• Web / Stripe — cancel via the Stripe Customer Portal linked from CVS Ledger billing, or reply in your deletion email that you also want billing cancelled

Disconnect bank links in the app before or as part of deletion when possible. Aggregator credentials we store are removed with household / connection deletion. You may also revoke CVS Ledger's access in your bank's or aggregator's (Plaid / SimpleFIN) settings.