Delete your account & data

You can delete your Koshac account and all of its data yourself, from inside the app, without asking anyone. This page is the full account of what that does.

Updated 6 September 2026

1. Delete it from the app

In short

Settings, then Profile, then Delete Account. Confirm who you are, and it is done.

  1. Open Koshac.
  2. Go to Settings → Profile.
  3. Tap Delete Account.
  4. Confirm it is you. If you signed in with a phone number, enter the one-time code we text you. If you signed in with Google or Apple, sign in there again.
  5. Confirm the deletion. Your data is removed and you are signed out.

This is permanent. There is no undo, no grace period, and no archived copy we can restore for you afterwards. If you only want a copy of your records, export a statement as PDF from inside the app before you start.

2. Settle and leave your groups first

In short

Nothing stops you deleting while you are still in a group, but doing it that way leaves more of you behind. Settle up and leave first if you can.

You do not have to leave your groups first, and the app will not block you. But a balance is shared, so your half of it cannot simply vanish: if you delete while you are still a member, your shared expenses and settlements stay where they are, and your membership row stays on that group's list marked as deleted. That is what keeps everyone else's numbers correct.

If you would rather not leave that behind, do this before deleting: settle what you owe and what you are owed, leave each group, and ask the remaining members to remove any shared expenses you were part of. Someone who has left a group is recorded as having left, and deleting your account afterwards does not put you back on its list.

Section 4 sets out exactly what survives either way.

3. What gets removed

DataWhat happens
Transactions, budgets, categories, tags, billsPermanently deleted
Accounts and balancesPermanently deleted
App settings and preferencesPermanently deleted
Profile photoPermanently deleted from storage
Registered devices and push notification tokensPermanently deleted
Detected bank messagesLocal only, and cleared on sign-out
Your sign-in account (phone, Google or Apple)Permanently deleted
Push notification historyPermanently deleted
The local database on your phoneRemoved when you sign out or uninstall

4. What is kept, and why

In short

Shared group records survive so other people's balances stay right. Everywhere else you become "Deleted User"; inside a group you took part in, the name that group already knew you by stays on the member list.

If you took part in shared groups, the expenses and settlements involving other people are retained, because deleting one participant's half of a shared expense would silently change what everyone else owes.

Everything that identifies you is removed from your account record:

  • Your phone number is deleted, along with the hash we use to find you by it, so no new invitation or lookup can ever reach the deleted account.
  • Your email address, display name and profile photo are deleted.
  • Anywhere you appear outside a group you were a member of, you are shown as Deleted User.

The one exception is the member list of a group you belonged to. Your membership row is marked deleted but keeps the name that group already had for you, so the remaining members can still read their own history - a settlement that said "Deleted User paid Deleted User" would be useless to them. That name is a snapshot held for that group only. It is not linked to any new account you create, it cannot be searched, and it carries no phone number, email address or photo with it.

To avoid even that, settle and leave every group, and have the other members remove the shared expenses, before you delete your account. Once you have left a group, you are recorded as having left rather than as a deleted member, and deleting your account later does not put you back on its list.

5. How long it takes

Deletion of your personal data happens immediately when you confirm it. Encrypted backups rotate on their own schedule, and any residual copies in them are purged within 30 days.

Crash reports, which never contained your transactions, age out on Firebase Crashlytics' own schedule.

6. If you cannot sign in

In short

Email us from the address on the account, or tell us the phone number on it.

Lost the phone number, or locked out for another reason? Email support@koshac.com and we will delete the account after verifying it is yours.

Please write from the email address associated with the account, or include the registered phone number. We ask because a deletion request we cannot verify is a way for somebody else to destroy your records. We acknowledge within 5 working days and complete verified requests within 30 days.

7. If you want less than deletion

Deleting everything is not always what someone actually wants:

  • Stop the bank-message capture without losing your history: turn it off in Settings. Your consent flag and the stored messages are cleared.
  • Stop notifications: turn off individual reminders in Settings.
  • Take your data with you: export a statement as PDF from inside the app, or email us for a machine-readable export.
  • Just sign out: this clears the local database on that device and leaves your synced account untouched.

What we hold and why is set out in the privacy policy.