how leaving works

most finance apps are vague here on purpose. we'd rather be exact.

export first

once your account is deleted, there's no getting your data back. before you do it, download a copy — settings → export gives you every transaction as a csv, free, no matter what plan you're on. do that first if there's any chance you'll want it later.

what deletion removes

going to settings → danger zone → delete my account and confirming with your password does this, immediately, in one step:

• your wallets, categories, tags, budgets, and every transaction in them
• your api keys and their usage history
• your two-factor secret and recovery codes
• your sign-in device history
• your activity log (the pro-tier audit trail) — this goes too, on purpose: we don't keep a security trail on an account that no longer exists
• the record of your consent to our terms and privacy policy
• every transactional email we ever sent you (verification links, password resets, security notices) — the sender address, the subject, the body, all of it

there's no undo, and there's no waiting period — deletion happens the moment you confirm it, not after a grace window. if you're not sure, export first.

what survives, and why

almost nothing. the one deliberate exception: if an email to your address ever bounced or was marked as spam, we keep a one-way hash of that address (not the address itself, not anything that says it was you) so we don't keep emailing an address that's told us to stop. that hash can't be turned back into your email address, and it isn't linked to your account once your account is gone.

backups

we don't currently run scheduled database backups. that means there's no backup copy of your data floating around after deletion — the moment your account is deleted, that's the only copy that existed, gone. we'll update this section with a real retention window the day we do add backups, and we won't pretend otherwise until then.

deleting your account vs. cancelling a subscription

these would be two different things — but right now there's only one, because ledgerpost doesn't process payments yet. deleting your account is currently the only "leaving" action that exists. once paid plans launch, cancelling a subscription and deleting your account will be separate steps with separate consequences, and this page will spell out both before that ships.

can't sign in?

email us at ledger.post@outlook.com from the address on the account (or with whatever proof you can offer that it's yours) and we'll take care of it by hand.