Delete your Pooled account

Doing it yourself, in the app

• Step 1. Open Pooled.
• Step 2. Tap the round menu button (☰) at the top of any tab to open the menu.
• Step 3. Choose the red Delete account, at the bottom of the menu. (It is also at the foot of your Account page, which you reach from Profile in the menu. The link under it, “How account deletion works”, opens this page.)
• Step 4. To confirm, type the number the app shows you. If you have not signed in recently, Google asks you to prove it is you, with your password or by choosing your Google account again, so that somebody who picks up your unlocked phone cannot do this to you.

It happens immediately. There is no waiting period, no “we are sorry to see you go” email. That also means there is no undo, so keep a copy first if you want your records: Export is in the same menu, or email us before you delete and we will send you a copy.

Have a Pro subscription? Cancel it in Google Play first. Deleting your Pooled account does not cancel a Google Play subscription, and Google would keep charging you. Open the Google Play app, then Payments & subscriptions, then Subscriptions, then Pooled. The app reminds you of this before it deletes an account whose subscription is still renewing.

No account? Then the same control is called Reset everything. With no account, none of your records was ever sent to us, so there is nothing of yours in the cloud to delete. Reset everything wipes the phone and returns the app to its welcome screen. Uninstalling the app does the same. Signed out, the menu also has Delete account (web), which opens this page, for an account you can no longer sign in to.

If you cannot get into the app

Lost the phone, forgotten the password, or already uninstalled? Email us and ask us to delete the account:

support@sunnyorbitapps.com, with the subject line “Delete my Pooled account”.

• Send it from the email address the account uses. That is how we know the request is yours. If you can no longer use that address, tell us the address and we will work out another way to confirm it with you.
• Include the email address of the account, if it is not the one you are writing from, and the name shown on your profile.
• Never send your password. We will never ask for it, and we do not need it to delete the account.

We will confirm it is your address, delete the account and everything listed below, and write back to say it is done. Expect that within 30 days, and normally much sooner. If we cannot confirm that the request came from the account holder, we will not act on it, because the alternative is that anybody could delete anybody's ledger by sending an email.

What is deleted

Everything below goes, from our servers and from the phone:

• Your sign-in: the account itself. You can make a new account with the same address later (an early-access place, if you had one, stays tied to the address; see What stays).
• Your profile: name, email address, profile picture, the date you accepted the Terms of Use, and your block list.
• Your personal wallets in full: every expense, every income, every transfer, every budget, every category you made, every grocery list and everything on it. Delete account erases your current wallets in full, including records you had deleted in them. If you deleted a whole wallet earlier, email support@sunnyorbitapps.com and we will make sure nothing of it is left.
• Every lent & borrowed record, and every repayment against it.
• Every receipt photo and every lent & borrowed photo in your current personal wallets, and your profile picture, both the copy on the phone and the copy uploaded to cloud storage. (Photos in a shared space stay with it; see below.)
• Your early-access grant: any free Pro you still had.
• Your subscription record on our server, and RevenueCat's record of you (the service we use to check purchases). Any Pro you paid for ends with the account.
• The notification tokens stored for your phones, and your Notifications choice for each shared space.
• Your PRO badge, on every shared space you were in.

On the phone this is a real erase rather than a marker saying “deleted”: the app comes back at its welcome screen with nothing in it, the way it was before you installed it.

Photos

Your uploaded photos are deleted too, in the same press of the button. Every receipt and lent & borrowed photo in your current personal wallets, and your profile picture, are removed from cloud storage while you are still signed in. There is nothing to email us about afterwards and nothing to wait for.

If any photo cannot be removed, usually because the connection dropped, the app stops and does not delete your account. It tells you which file it could not remove, and lets you try again. It will not delete your account over a photo that would then be stranded in storage with no account left that could reach it.

The one exception is photos you attached to entries in a shared space. Those stay with the entries, for the same reason the entries do, which the next section explains. You lose your own access to them when your account is deleted. If you want them gone, take them off those entries before deleting your account.

What stays, and why

A few small records. If your account took one of the first 100 early-access places, was made before 11 October 2026 at 04:33 UTC, or was given Pro free by us, we keep a one-way hash of your email address (not the address itself) with the place number, its dates and the account's random user ID, so the same address cannot take a second place. We keep this hash with no end date, because its only job is to stop the same address taking a place again. If your account took one of the first 100 places, a new account at that address gets the same place and end date back. If your account was made before 11 October 2026 at 04:33 UTC, a new account at that address cannot take a place.

Two small counters, usage/{your-user-id} and limits/{your-user-id}, are deleted by our server a few minutes after the account. (They hold how many records you added on your last day, and how many shared spaces and wallets you owned.) A record of the wallet limits for a wallet you deleted earlier, and your own join requests still waiting in other people's spaces, can remain: email support@sunnyorbitapps.com to have them removed. Our server keeps a short log of each subscription event RevenueCat sends us (its type, its dates and your random user ID) for 90 days, so that no event is applied twice. It is then deleted automatically. The list of records our server has already sent notifications about expires by itself within about three days. Google Play also keeps its own record of any purchase, under Google's policies.

Shared spaces you were in with other people. If you and a flatmate kept a shared ledger, that ledger is theirs as much as yours, and the money has to still add up for them after you leave. So the space itself stays, and the entries and transfers in it stay.

Here is exactly what happens to you in those spaces, in this version of the app:

• You can no longer read them, because your account no longer exists.
• Your profile picture is deleted from storage, so it no longer shows.
• Your display name stays on your membership, so the other members still see it next to the entries and transfers that involved you.
• A request you sent to join a space, that was never answered, stays in that space's list until its owner declines it, or until you ask us to remove it.
• Your OG badge, if you had one, stays next to your name until we remove your name on request.
• Receipt photos you attached to entries in that space stay with those entries, for the same reason the entries do.

If you want your name taken out of a shared space, email support@sunnyorbitapps.com from your account's email address, naming the spaces, ideally before you delete the account. We will replace your name with a generic label by hand within 30 days. If you have already deleted it, write anyway with the space's name and the name shown there; we will check with the space's owner and do the same.

What remains is your part of somebody else's household accounts, something like “Sam put in $60”, or “someone put in $60” once we have removed your name. A note you typed on one of those entries stays with it, so if you wrote anything identifying in a note, edit it before you go. We think keeping the amounts is the right balance between your right to be forgotten and their right to have their own records make sense.

Shared spaces you created are not deleted either, not even one that nobody else ever joined. Deleting your account removes your own personal wallets, and leaves every shared space where it is so that it is never deleted out from under somebody else.

Deleting a shared space hides it from every member, but its records stay in our database marked as deleted, and photos attached to its entries stay in storage. To have a shared space and its photos erased completely, email support@sunnyorbitapps.com from your account's address, naming the space, and we will erase it within 30 days.

Backups

We do not keep backups of the Pooled database, and point-in-time recovery is switched off. Our database, Google Cloud Firestore, keeps earlier versions of changed or deleted records for one hour, after which they are gone. Google may take longer to clear deleted data out of its own systems, as its Firebase data processing terms set out. Nobody can read or restore a single person's data from there.

If it does not work

Deleting a full ledger is hundreds of small operations, and on a bad connection some of them can fail. If that happens the app tells you so and stops before deleting your account, so you can try again. Anything it had already erased stays erased. Try again on a better signal. If it keeps failing, email support@sunnyorbitapps.com and we will finish it from our side.

The Pooled Privacy Policy has the full detail of what we hold and for how long.