Delete your Pippa account.

This page explains how to delete your Pippa account and what happens to your data when you do. It applies to the Pippa app (iOS, Android, and web), operated by Pippa Money Ltd, a private limited company registered in England & Wales (company number 17189960), registered office Suite RA01, 195-197 Wood Street, London E17 3NU.

1. How to request deletion

You can request that your Pippa account is deleted in two ways:

• From inside the app: open Settings → Account → Delete account. Confirm the prompt. Your account is deactivated immediately and queued for full deletion (see §3).
• By email: send a request from the email address registered with your Pippa account to support@pippa.tax with the subject line “Delete my account”. We'll confirm by replying within 7 working days, then process the deletion within a further 30 days.

2. What gets deleted

When your account is deleted, we remove:

• Your name, email address, phone number, and any other profile information.
• Your transaction list, categorisation rules, receipts, and any uploaded documents (e.g. mileage logs, expense photos).
• Your in-app preferences, settings, and saved drafts.
• Your authentication credentials (Apple ID, Google ID, or email magic-link history).
• Connection metadata with third-party services (bank, HMRC, platforms).
• Analytics and product-interaction events tied to your user ID.
• Crash logs and diagnostic data tied to your user ID.

3. What we keep, and why

A small set of data is kept after account deletion because we are legally required to retain it. Specifically:

• HMRC submission records (6 years). Anything Pippa filed to HMRC on your behalf (quarterly updates, Final Declaration) is kept for 6 years from the end of the relevant tax year. This matches HMRC's own record-keeping requirements under Schedule 11 of the Finance Act 2008 and the MTD ITSA regulations. These records are anonymised where possible.
• Billing and payment records (6 years). Invoices and transaction confirmations are retained for 6 years under UK tax law (Companies Act / VAT Act).
• Pseudonymised audit logs (12 months). Records of security-relevant events (logins, consent grants and revocations) are kept with all identifying information stripped, solely to investigate fraud and incidents.

After the retention period above, the remaining records are permanently deleted. None of the retained data is used for marketing, personalisation, analytics, or training models. We don't reactivate or re-link retained records to any future Pippa account.

4. Deleting some data without deleting your account

If you want to remove specific data while keeping your account, you can:

• Disconnect a bank or platform via Settings → Connections → Disconnect. The connection is revoked at the source (Open Banking, the platform) and transactions imported from that connection are removed from your Pippa account.
• Delete individual transactions, receipts, or rules from their respective screens.
• Export your data before deletion via Settings → Account → Export data. You'll receive a downloadable archive of everything Pippa holds on you, in a portable format (JSON + CSV).

5. Third parties

When you delete your account, we also instruct the following processors to delete the data they hold on you:

• Stripe: billing records (subject to Stripe's own 6-year retention for completed transactions, required by financial regulation).
• Open Banking provider: consent records are revoked and the associated access tokens invalidated.
• Sentry and PostHog: analytics and crash data tied to your user ID is removed.
• Resend: your email address is removed from our transactional and marketing audiences.

Some of these processors operate their own legally mandated retention periods. We don't control those.

6. Questions

If you have questions about deletion before or after submitting a request, email support@pippa.tax. For complaints about how we handle your data, you can also contact the UK Information Commissioner's Office (ICO) at ico.org.uk.