Retention

Periods

• The household's encrypted records and files: until you delete them or as long as the household exists. Traces of deleted records (without content) are removed after 90 days.
• The account (e-mail, keys) and membership: until you delete the account or the household.
• Sessions: 30 days from the last activity, at most 90 days; their records are deleted 7 days after expiry or sign-out. Sign-in codes after 1 day, failed attempts after 2 days.
• Sealed bill e-mails: until processed, at most 30 days (in the storage at the latest 45 days); the data about the e-mails 45 days after processing; the number of e-mails per month 13 months.
• Proven savings: receipt fingerprints and the trust index up to 400 days (also after the account is deleted); details of single cases and publication attempts 30 days; account marks 90 days.
• Notifications and the usage counts of features: as long as the household exists.
• The log of e-mails sent: 13 months; copies of service e-mails (not invoices) 90 days.
• Technical records of requests: 90 days; in-house statistics: 13 months; events from Stripe: 90 days.
• Requests to Help: as long as the account exists.
• Payments, invoices and credit notes: as long as the Accounting Act and the VAT Act require (10 years), also after the account is deleted — without household data.
• The record of the accepted Terms of service and of the consent to immediate start: as long as the household exists and 5 years after the acceptance if it is deleted. Closed GDPR requests: 5 years.
• Encrypted database backups: up to 5 weeks, after which deleted data is gone from them too.

New in 2.1:

• The trial hashes (e-mail, device, passkey, network): kept also after the account and household are deleted, so that the trial cannot be started again; they do not contain the e-mail or address itself.
• Cancellation reasons and details: as long as the payments are kept (up to 10 years); when the household is deleted, the link to it is removed.
• Invitation data (the numbers of the two households, the status, the reward, the card fingerprint and the device key, without e-mails): kept also after the household is deleted, so that the same household cannot be counted again.
• Night AI requests: until processed, at most 72 hours; the result until the app collects it.
• Items shared with support: 7 days or until withdrawn.
• The category accuracy counts: a household's submitted day 60 days; the overall counts per day (with no link to a household) as long as needed for the statistics.
• The pairs for the shared product dictionary: while it is on; they are deleted when it is turned off or the household is deleted.

The AI providers keep the data they receive for up to 30 days under their own rules; Stripe keeps payment data under its own rules and legal obligations.