PocketReceipt

In PocketReceipt, use the in-app option labelled Delete Account & Data and follow the on-screen steps.

The in-app deletion flow includes:

• An HMRC record-keeping reminder (commonly ~6 years total for self-employed records).
• An option to export before deletion.
• A confirmation step that requires typing DELETE to prevent accidental deletion.

When you complete Delete Account & Data, PocketReceipt is intended to delete:

• Local app data on your device (including your local database and cached receipt images).
• Local app settings (for example: stored preferences related to usage and access status).
• Authentication account used to sign in (your sign-in account within PocketReceipt).
• Associated server-side data linked to your account used for app functionality where enabled (for example: cloud backup data).
• Related records stored for features such as scan usage tracking and VIP/testing access markers (where present).
• Accountant link data: any active links between your account and an accountant are severed. Synced data stored in the accountant’s view is deleted from our servers.
• Shared data and images: if you enabled accountant access, the shared data and image references are removed. The accountant will no longer be able to access your data through PocketReceipt.
• CIS payment records: if you used the CIS (Construction Industry Scheme) feature, all CIS payment records including contractor names, amounts, and deduction details are deleted.
• Document transfer files: any documents you uploaded via the secure document transfer feature are deleted from Firebase Storage. The local copies on your device are also removed as part of local data deletion.
• Accountant requests and messages: any pending requests from your accountant and message history are deleted.
• Pending accountant corrections: any corrections your accountant made to your records that have not yet been applied are deleted.

Local data is removed immediately. Some server-side data may require up to 48 hours for automatic cleanup. If any server-side items cannot be removed immediately, they are queued for automated retry.

PocketReceipt does not sell personal data and does not share personal data with advertisers.

If you previously shared data with an accountant, copies they already downloaded are outside PocketReceipt’s control. Contact your accountant directly if needed. The accountant’s own records of having been linked (for their audit trail) may be retained by the accountant separately.

Before deleting, we recommend exporting your records if you need to keep them for tax or accounting purposes. PocketReceipt provides export options such as CSV and PDF reports.

If you delete your account and data, you may lose access to exported history and backups stored in the app.

If you are an accountant using the PocketReceipt Dashboard, you can delete your account by:

• Contacting hello@pocketreceipt.co.uk from the email address associated with your Dashboard account, with the subject line Dashboard Account Deletion.

What gets deleted:

• Your Dashboard login and account data.
• All client link records (clients will be notified that the link has been severed).
• All synced client data stored for your Dashboard views (receipts, mileage, income, CIS, messages, notes, document requests).
• Any invite codes you generated.
• Your registered passkey credentials (accountants/{uid}/passkeys/).
• AML CDD records for all your clients (accountants/{uid}/clientCompliance/), subject to any overriding legal retention obligations (see below).
• Your Stripe subscription is cancelled. No further charges will be made.

What is NOT immediately deleted:

• Your clients' own app data is unaffected — they keep their local records.
• Audit log entries (accountants/{uid}/auditLog/) are retained for 7 years from the date of each logged action, as required by the Money Laundering Regulations 2017 (MLR 2017) record-keeping obligations. After 7 years, entries are automatically and permanently deleted.
• Stripe may retain transaction records for their legal/financial obligations. Contact Stripe directly for their retention policy.
• Data you already exported or downloaded is outside PocketReceipt's control.

If you submitted your email address via a sign-up form on the PocketReceipt website, you can request deletion by:

• Emailing hello@pocketreceipt.co.uk with the subject line Website Data Deletion.
• Include the email address you want deleted.

What gets deleted:

• Your email address and submission metadata from our database.

Analytics data: Google Analytics and Microsoft Clarity collect anonymised usage data via cookies. This data cannot be linked back to you individually. You can clear analytics cookies from your browser at any time. If you rejected analytics cookies via the cookie consent banner, no analytics data was collected.

If you cannot access the app, you can request account deletion by email.

• Email: hello@pocketreceipt.co.uk
• Subject: Account Deletion Request
• Please send the request from the email address associated with your PocketReceipt sign-in, or include enough information for us to verify ownership.

When you delete your account, PocketReceipt processes your data as follows:

• All local data (receipts, mileage, vehicles, CIS records, messages, documents, settings) is permanently deleted from your device immediately.
• Cloud backup data (backup files in Firebase Storage) is permanently deleted. If you had backed-up receipt images (through a Professional subscription, Storage Pack, or accountant link), those images are also permanently deleted.
• Your Firebase Authentication account is permanently deleted (or queued for automated deletion if re-authentication is required).
• Firestore documents linked to your user ID (including scan counts, accountant link data, document transfer metadata, passkey credentials, and AML CDD client compliance records) are permanently deleted or queued for automated cleanup within 48 hours.
• Document transfer files in Firebase Storage are permanently deleted.

PocketReceipt does not retain your data after account deletion, except where automated server-side cleanup is still in progress (up to 48 hours), or where retention is required by law. Specifically, audit log entries at accountants/{uid}/auditLog/ are retained for 7 years per MLR 2017 and are not deleted on account deletion — they are auto-deleted after the 7-year retention period expires.

Under UK GDPR Article 17, you have the right to erasure ("right to be forgotten"). This means you can request that PocketReceipt deletes all personal data we hold about you.

When we must comply:

• The data is no longer necessary for the purpose it was collected.
• You withdraw consent (where consent was the legal basis).
• You object to processing and there are no overriding legitimate grounds.
• The data was unlawfully processed.

When we may refuse:

• If retention is required for compliance with a legal obligation.
• If the data is needed for the establishment, exercise, or defence of legal claims.

Response timeframe: We will respond to all deletion requests within 30 days. If we need more time (up to 60 additional days for complex requests), we will inform you within the initial 30-day period and explain the reason for the delay.

Other rights: In addition to erasure, you also have the right to access, rectification, restriction, data portability, and objection. See our Privacy Policy for full details.

To exercise any right, contact hello@pocketreceipt.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Email: hello@pocketreceipt.co.uk

Developer: PocketReceipt (United Kingdom)