Data Retention Policy
What Bloom keeps, for how long, and how deletion works.
Bloom — Data Retention Policy
Effective: 9 August 2026
Last updated: 9 August 2026
This page says how long Bloom keeps each kind of data, and what happens when you delete it. It supplements the Privacy Policy (/privacy).
Our approach: you control the clock. Almost everything Bloom holds is kept while your account exists and is deleted the moment you ask — either per item, or all at once.
Retention schedule
| Data | How long we keep it | Why | How to delete it sooner |
|---|---|---|---|
| Account (email, 18+ attestation) | Life of the account | Sign-in and age-gate compliance | Settings → Delete my account |
| Transactions, accounts/cards, categorisation rules, budgets | Life of the account | The core function of the product | Delete rows inline · Settings → Start fresh · delete your account |
| Goals | Life of the account | Goal tracking | Delete the goal · Start fresh · delete your account |
| Detected subscriptions | Life of the account | Recurring-payment view | Start fresh · delete your account |
| Chat messages (encrypted at rest) | Life of the account | Your conversation history | Settings → Start fresh wipes all chats · delete your account |
| Coach memory facts (opt-in, encrypted at rest) | While the coach_memory consent is active and the account exists | Personalising future chats | Delete any single fact, or all of them, in Settings → Coach memory · revoke the consent · Start fresh |
| Uploaded statement PDFs | Life of the account — we do not delete them on a timer | Kept so a failed or partial import can be re-parsed without asking you to upload again | Delete the statement in Settings → Manage uploaded statements, which removes the file · or delete your account |
| Statement PDF passwords | Never stored at all | Used once in memory to unlock the file, then discarded | Nothing to delete |
| AI Financial Plans + assessment answers | Life of the account | Showing your plan and its history | Settings → AI Financial Plan → Delete my plan history |
| Tax-regime calculation | Life of the account | Saving your latest result | Cleared with Start fresh or account deletion |
| Pricing-survey answer (if you answered it) | Life of the account | Deciding whether and how to charge in future | Delete your account. Start fresh deliberately keeps this — it is research about pricing, not part of your money data, so resetting your transactions does not reset it |
| Consent records | Life of the account, then retained in anonymised form | DPDPA Sec 6(4) requires us to prove a consent existed | Not individually deletable — this is a legal minimum; anonymised when you delete your account |
| Audit logs (security events) | Retained for fraud and security purposes, anonymised when you delete your account | SIM-swap and fraud defence; evidence our DPDPA processes ran | Not individually deletable — legal/security minimum |
| Crash reports (Sentry) | Retained by the processor under its own schedule | Fixing crashes | Revoke the analytics consent to stop new reports |
| Anonymous analytics (PostHog) | While the analytics consent is active | Measuring which features get used | Revoke the analytics consent |
| AI prompts at Anthropic (US) | Up to 30 days at Anthropic, then deleted | Abuse detection, under Anthropic's published policy | Automatic |
What happens when you delete your account
- Your data is erased from our live systems, across every table that holds it, and your uploaded statement PDFs are removed from file storage.
- The only things kept are the two legal minima — consent records and audit logs — and both are anonymised, meaning the link to you is severed.
- Deleted data may persist for a short time in our hosting provider's routine encrypted backups until those backups roll over on their normal cycle. It is not restored to the live system.
- Anthropic's copies of any prompts age out separately under its own 30-day policy.
We aim to complete deletion within 72 hours of your request. If in-app deletion fails, email grievance@mybloomapp.com from your account email address and we will complete it manually.
Start fresh vs Delete account
| Start fresh | Delete my account | |
|---|---|---|
| Transactions, goals, chats, coach memory | Erased | Erased |
| Accounts/cards, categorisation rules, budgets | Erased | Erased |
| Pricing-survey answer | Kept | Erased |
| Your account and sign-in | Kept — you stay signed in | Erased |
| Consent records | Kept | Anonymised and retained |
Changes
Material changes to this schedule are notified in the app at least 7 days before they take effect, and the Privacy Policy's change-notification rules apply.
Questions about this page? Email hello@mybloomapp.com.
Bloom is an educational personal-finance app, not a SEBI-Registered Investment Adviser. Nothing on this page or in the app is investment, tax, or insurance advice.