Bullion Note
Delete Account
How to delete your account
Sign-in in Bullion Note is optional. Core holding records and valuation work without an account. A server-side account is created only if you choose Google, Apple, or email-code sign-in.
In the app (recommended)
Open the app → bottom tab Profile → account card menu → Delete account → confirm. The current account is deactivated and signed-in devices are signed out.
Web / email request
If you cannot use the app, request deletion by email:
To: hi@incosmos.art
Suggested subject: Bullion Note Account Deletion Request
Please include the email used to sign in, the sign-in method (Google, Apple, or an email code), and any details that help us identify the account. We will process deletion requests within a reasonable time.
In the app (recommended)
Open the app → bottom tab Profile → account card menu → Delete account → confirm. The current account is deactivated and signed-in devices are signed out.
Web / email request
If you cannot use the app, request deletion by email:
To: hi@incosmos.art
Suggested subject: Bullion Note Account Deletion Request
Please include the email used to sign in, the sign-in method (Google, Apple, or an email code), and any details that help us identify the account. We will process deletion requests within a reasonable time.
Data that is deleted
Account deletion removes server-side data associated with that account, including:
- Account identifiers (email, display name, provider user ID)
- Session records and the session cookie (bullionnote_session)
- Device push tokens
- Reminder / alert rules and alert events
- Alert preferences (for example digest settings and quiet hours)
- Provider credentials stored for the account, if any
- Synced records and photos stored in the account (holdings, ledgers, everyday entries, categories, goals and budgets, synced settings, and photos attached to records). All copies of this account data are removed within 30 days after account deletion.
To complete revocation of third-party sign-in authorization, necessary encrypted credentials and associated identifiers may be temporarily retained for retries after a failure. They are deleted when revocation processing completes and are not used to restore a deleted account.
Related security audit records are de-identified (user ID, network hashes, and metadata are cleared). An anonymous deletion event and an account deletion tombstone may be retained for security, abuse prevention, and data integrity.
Related security audit records are de-identified (user ID, network hashes, and metadata are cleared). An anonymous deletion event and an account deletion tombstone may be retained for security, abuse prevention, and data integrity.
Data that is kept or not auto-deleted
- Local metal-ledger, life-ledger, and valuation data on your device are not deleted automatically when you delete the account. They stay in the app sandbox by default. To remove them, uninstall the app or clear app data in system settings.
- Backup files you exported yourself (for example bullion-note-backup.zip) remain under your control; account deletion does not recall exported files.
- Information retained independently by Google or Apple is handled under those providers’ policies.
What optional sign-in stores
Only after you choose to sign in do servers store account-operation data: email, display name, sign-in provider user ID, sessions, and—if you enable reminders—device tokens, alert rules, and preferences. After sign-in, synced records and photos are also stored in the account and are cleared when the account is deleted. Without sign-in, those records stay on this device only. Core metal- and life-ledger features use on-device data; reminders can also run on the device without a required account. Records on this device remain after account deletion.