Account & Data Deletion

1. Summary

This page explains how to delete your VoiceMoneyManager account (Android app published by AI Canadian Solutions Inc.), what data is erased when you do, and what — if anything — we are required to keep.

You can delete your account yourself, from inside the app, or by emailing us. Both routes lead to the same result: your account is closed immediately and every record we hold about you is permanently destroyed at the end of the retention window described below.

2. Delete your account in the app (self-serve)

The app has a built-in, self-serve deletion control. No email, no ticket, no waiting on us:

1. Open VoiceMoneyManager and sign in.
2. Go to the Settings tab.
3. Scroll to the Legal & Privacy section.
4. Tap Delete my account ("Permanently erase your account and data").
5. Type DELETE in the confirmation box to confirm you understand this cannot be undone, then confirm.

The account is closed the moment you confirm. All authentication tokens are revoked, so every phone, tablet, and browser session signed into that account is logged out and cannot sign back in.

3. Request deletion by email

If you cannot access the app — a lost device, a locked-out login, or you have already uninstalled — email us and we will delete the account for you:

Send the request from the email address on the account where possible — that is how we verify the request is genuinely yours. If you cannot, we will ask you a small number of questions to confirm ownership before we act, because we will not destroy someone's financial records on an unverified request.

We action every verified deletion request within 30 days of receiving it, and in practice usually within a few business days. We will confirm by email once the account has been closed.

4. What gets deleted

When the purge runs we hard-delete — not archive, not anonymize, not "mark as deleted" — everything below. Files held in object storage are erased along with their database records: the underlying image and file objects are destroyed, not just the pointers to them.

• Your account — email address, name, password hash, phone number, country, avatar image, plan and billing linkage, and every account preference and setting.
• Authentication tokens — every API and session token on every device; revoked immediately at request time and destroyed at purge.
• Profiles — every personal and business profile you created, including profile avatars and per-profile tax rates (your HST/GST/PST configuration).
• Financial accounts — every bank, cash, credit, and store-credit account you set up.
• Transactions — your entire ledger: every income and expense record, with amounts, dates, notes, tags, categories, tax fields, and vendor links, including transactions you had already deleted inside the app.
• Receipts and receipt images — every receipt photo and scanned document you uploaded, deleted from object storage as well as from our database, plus the OCR scan records and the line-item data extracted from them.
• Secure Vault — every vault item and folder, the encrypted file blobs in object storage, and the vault access log. Vault contents are end-to-end encrypted, so we never held readable copies to begin with; the ciphertext itself is destroyed.
• Budgets and goals — including any attachments or images added to them.
• Recurring transactions and any scheduled entries.
• Imports — wallet and statement import history, and import batch records.
• AI corrections and voice data — receipt corrections, vault description corrections, voice-parse logs, and the personal voice rules you taught the app.
• Usage and diagnostic records — usage counters, per-day usage records, vendor-click history, and crash reports tied to your account.
• Data exports — any ZIP exports you previously requested, and the links to them.

Nothing on this list survives the purge, and there is no backdoor for support staff or administrators to recover it afterwards.

5. What is retained, and why

We keep as little as the law allows. Precisely three things can outlive your account.

a. Business / tax records — only where tax law requires it

If your account is flagged as a business profile (sole proprietorship, corporation, or similar), tax law applies to the records it holds: section 230 of the Income Tax Act (Canada) requires business books and records — receipts included — to be kept for six (6) years. For those accounts we hold the records in encrypted storage for that period instead of purging at 30 days. During that time they are not used for any purpose other than producing them to you, or to the Canada Revenue Agency on lawful request, and they are destroyed once the clock expires. Personal accounts are not subject to this and are purged at 30 days.

b. Billing and payment records

If you ever paid for a subscription, our payment processor (Stripe) retains the transaction record for the period required by tax and anti-money-laundering law. We never store your card number — Stripe does — but the fact and amount of a payment is a financial record we cannot lawfully erase on request. This covers invoices only: it contains no receipts, no ledger, and no vault data.

c. Anonymized aggregate statistics

When an account is deleted we keep a single row of fully anonymized product statistics: the month you signed up, the month you deleted, which plan you were on, and how much the app was used in total. It contains no name, no email, no user ID, no financial data, and nothing that can be traced back to you or re-identified. We use it only to understand product retention in aggregate.

6. Timeline

• Immediately on request — the account is closed, all sessions and tokens are revoked, and you can no longer sign in. The account is hidden from our support staff.
• Days 1–30 (grace window) — the data still exists but is inaccessible. This window exists only so an accidental deletion can be reversed on request, and so we can meet fraud and abuse obligations. Contact us within 30 days if you deleted by mistake.
• Day 30 — permanent purge (personal accounts) — an automated job hard-deletes everything in section 4, including the files in object storage. This is irreversible.
• Business accounts — the same purge runs, but only after the six-year tax-retention period in section 5(a) has expired.
• Email requests — actioned within 30 days of a verified request; the clocks above then run from the date we close the account.

7. Get a copy of your data first

Deletion is permanent and we cannot restore your ledger afterwards. If you want a copy, request it before you delete: in the app go to Settings → Legal & Privacy → Download my data. We build a ZIP of everything we hold about you and email a secure, expiring download link to your verified address, normally within 24 hours. You can also ask for an export by writing to the address below.

8. Contact

Account-deletion requests, questions about this page, or a deletion you need reversed inside the 30-day window:

• Deletion requests: voicemoneymanager@aicanadiansolutions.ca
• Privacy officer: privacy@aicanadiansolutions.ca
• Developer: AI Canadian Solutions Inc., Canada

See also our Privacy Policy, which sets out your full data rights, and our Terms of Service.