Data Retention Policy

• The following table summarizes how long we retain different types of data:
• • Account & Profile Data: Retained while your account is active. Deleted upon account deletion.
• • Financial Transaction Records: Retained while your account is active. Deleted upon account deletion.
• • Geolocation Coordinates: Automatically purged after 24 hours via a scheduled database cleanup job (runs hourly).
• • Document Vault Files: Retained until you delete them or delete your account. Deleted files are removed from active storage immediately and permanently purged within 30 days.
• • SMS-Derived Transaction Data: Structured transaction records retained while account is active. Raw SMS text is never stored. Deleted upon account deletion.
• • Push Notification Tokens: Retained while needed for notification delivery. Deleted upon account deletion.
• • User Preferences & Settings: Retained while account is active. Deleted upon account deletion.
• • Advertising Data: Managed by Google AdMob according to Google's data retention policies.

To safeguard family privacy, geolocation coordinates generated by the Family Safety Live Tracking feature are strictly temporary. A database cleanup function (cleanup_stale_locations) runs on an hourly schedule and permanently deletes all location coordinate records older than 24 hours.

When you delete a document (receipt, invoice, or warranty file) from the My Proofs vault, it is immediately removed from the user interface and access is revoked. The underlying storage object is scheduled for permanent deletion from cloud storage.

Raw SMS message bodies are parsed locally on-device and are never saved to our databases. Only the structured transaction output (amount, bank, merchant, date, type) is retained with the note "Automatically detected from SMS".

• When you initiate account deletion via Settings → Privacy & Security → Delete Account or the web portal at https://xpool.info/delete-account, the following data is removed:
• • Authentication credentials (from auth system)
• • User profile
• • Family group memberships
• • All transaction records created by you
• • All uploaded proof documents and associated storage objects
• • Location records
• • Push notification tokens
• • User preferences and settings
• • Savings goals and loan records
• • Audit log entry is created for compliance records
• Data belonging exclusively to other family members is not affected.

We do not currently implement automatic deletion of inactive accounts. Your data remains available as long as your account exists. We may introduce an inactive account policy in the future, with prior notice via email.