Account Deletion and Data Requests

Service Operator

OPHIR is operated by:

Privacy and data requests: privacy@joinophir.app
Support: support@joinophir.app
General and legal inquiries: contact@joinophir.app

At a Glance

1. Purpose and Scope

This guide explains how an OPHIR user may:

• initiate deletion of their account;
• request access to or a copy of personal information;
• correct inaccurate, incomplete, or equivocal information;
• request deletion of specific information;
• withdraw consent or stop certain processing;
• obtain information about use, disclosure, retention, or automated processing;
• exercise a portability right where applicable;
• submit a privacy complaint.

This guide applies to personal information OPHIR processes in connection with the mobile application, web pages, support, subscriptions, financial connections, budgets, forecasts, and the financial assistant.

The OPHIR Privacy Policy provides the complete description of data categories, processing purposes, recipients, retention, security, and user rights. If there is a conflict, the Privacy Policy, Terms of Service, and mandatory law apply.

2. Four Separate Actions

2.1 Deleting Your OPHIR Account

Deletion closes your OPHIR account, ends ordinary access to the Service, and starts deletion or de-identification of associated active user data under OPHIR's control, subject to limited required retention.

2.2 Cancelling a Subscription

Subscriptions are purchased and managed through the Apple App Store or Google Play. Deleting the application or your OPHIR account does not ensure that automatic renewal through the store will stop. To avoid future charges, cancel the subscription separately before the deadline stated by Apple or Google.

Detailed instructions appear in the OPHIR Subscription Management and Cancellation and Refunds documents.

2.3 Disconnecting a Financial Account

Disconnecting stops or limits future transmission and refreshes for the applicable connection. It does not necessarily delete data that OPHIR, Plaid, or the financial institution previously received.

2.4 Deleting Data Held by Plaid

Plaid may process certain information as an independent provider under its own policy. Deleting OPHIR data does not necessarily delete every record Plaid must or may retain independently. To manage Plaid data, use the Plaid tools described in Section 9.

3. Requests You May Submit to OPHIR

Subject to applicable law and limited exceptions, you may request:

• confirmation of whether OPHIR holds personal information about you;
• access to personal information and a copy of available records;
• correction of inaccurate, incomplete, or equivocal information;
• deletion of your account and associated active user data;
• deletion of specific information without deleting the entire account, where technically and legally possible;
• withdrawal of consent to a particular use or disclosure;
• cessation of dissemination or de-indexing in circumstances provided by law;
• information about collection purposes and methods, persons with access, recipients, processing locations, and retention periods;
• required information about a significant decision based exclusively on automated processing;
• release of computerized personal information collected from you in a structured and commonly used technological format where a portability right applies;
• review of a complaint concerning the processing of personal information.

Withdrawing consent may disconnect a financial account, stop synchronization, or make a feature that requires the information unavailable. Withdrawal does not affect the lawfulness of processing completed before it took effect and does not override required retention.

4. Before Deleting Your Account

Before confirming deletion, we recommend that you:

• cancel any active subscription through the Apple App Store or Google Play;
• keep the cancellation confirmation;
• export or save any information you may need later;
• complete open support cases, disputes, and refund requests;
• disconnect financial accounts if you wish;
• make sure you understand the consequences of irreversible deletion.

After deletion is completed, access to budgets, categories, goals, history, and other account information may be permanently lost. A deleted account cannot be used to confirm earlier settings or restore content, except for limited records OPHIR must or may retain.

5. How to Delete Your Account in the Application

The primary method is:

• sign in to OPHIR;
• open Settings;
• select Account;
• tap Delete Account;
• review the consequences;
• confirm the request using the method shown in the application.

OPHIR may require you to sign in again, enter a confirmation code sent to the registered email address, or provide another reasonable form of identity verification. This helps prevent another person from deleting your account without authorization.

If the deletion feature is temporarily unavailable because of a technical error, you cannot sign in, or you need assistance, email privacy@joinophir.app. Use the subject line "Delete My OPHIR Account," provide the account email address, and briefly describe the issue.

Do not send an online-banking password, Apple or Google password, full card number, PIN, card security code, or one-time code.

6. How to Submit a Data Request

Email the Privacy Officer at privacy@joinophir.app.

Include:

• your name;
• the email address associated with your OPHIR account;
• the specific type of request;
• the information or time period covered by the request;
• your preferred method of receiving a response;
• representative information if someone is submitting the request on your behalf.

Example subject lines:

• "Access My Data";
• "Correct My Data";
• "Delete My OPHIR Account";
• "Delete Data Received Through Plaid";
• "Withdraw Consent";
• "Automated Processing Question";
• "Privacy Complaint".

The more precisely you describe the request, the more quickly OPHIR can locate the relevant records. If a request is too broad, we may ask you to clarify its scope.

7. Identity Verification

Before disclosing, changing, or deleting data, OPHIR must reasonably confirm that the request comes from the account holder or an authorized representative.

Depending on the risk, we may:

• ask you to sign in again;
• send a link or code to the registered email address;
• match limited account information;
• request documentary proof of a representative's authority;
• request additional verification if access to the account has been lost.

We request only the information reasonably necessary for verification. If a document is required, we will explain its purpose and provide a secure transmission method. Verification information is used to process the request and protect against fraud, then retained only to the extent necessary.

OPHIR does not ask for an online-banking password or a financial institution's one-time code. Do not send such information even if you have not been asked for it.

8. What OPHIR Account Deletion Covers

After confirming a valid request, OPHIR closes the account and deletes or de-identifies active user data under its control in accordance with the applicable retention schedule. Depending on the features used, this may include:

• account profile, settings, and identifiers;
• active sessions, access tokens, and associated permissions;
• connected financial accounts and connection tokens controlled by OPHIR;
• imported balances, transactions, and financial account metadata;
• budgets, categories, rules, financial goals, notes, and user entries;
• forecasts, summaries, alerts, and personalized insights;
• financial assistant prompts and associated history, if that history was retained;
• notification settings and preferences;
• other active data directly associated with the account.

Deleting an account does not mean that every copy disappears from every system immediately. Limited records and backups are handled as described in Section 11.

If you want to delete only certain information, identify it in your request. We will explain whether partial deletion is possible without disrupting a selected feature or violating a mandatory requirement.

9. Plaid and Financial Connections

OPHIR may use Plaid to connect to supported financial institutions. To set clear expectations, it is important to distinguish the following actions.

Disconnecting in OPHIR. This removes or deactivates the connection on the OPHIR side and stops future refreshes to the extent controlled by OPHIR. Previously imported data may remain until it is separately deleted.

Deleting your OPHIR account. This starts deletion of active OPHIR data, including previously imported financial data and connection tokens under OPHIR's control, subject to required retention.

Managing the connection through Plaid. Plaid Portal may allow you to view financial connections, disconnect applications, and manage certain Plaid data:

https://my.plaid.com

Plaid information about privacy and available requests:

https://plaid.com/legal/#end-user-privacy-policy

Disconnecting an application through Plaid ordinarily stops future data sharing with that application, but it does not necessarily delete information the application previously received. To delete data already held by OPHIR, submit a request to OPHIR or delete your OPHIR account. To request deletion of data under Plaid's independent control, use Plaid Portal or Plaid's privacy tools.

The financial institution may also retain its own records and apply its own policy. OPHIR cannot delete records lawfully controlled by Plaid, Apple, Google, a financial institution, or another independent party.

10. Your Subscription After Account Deletion

Deleting your OPHIR account does not instruct Apple or Google to stop automatic renewal. Before deletion:

• for an Apple subscription, open Settings -> your name -> Subscriptions -> OPHIR -> Cancel Subscription;
• for a Google Play subscription, open Google Play -> profile -> Payments and subscriptions -> Subscriptions -> OPHIR -> Cancel subscription;
• keep the cancellation confirmation and access end date.

If you deleted your account before cancelling, open the store and cancel the subscription anyway. For help locating a purchase or resolving an access issue, email support@joinophir.app.

Cancelling a subscription does not automatically refund a completed charge. For a refund, use the separate process described in the OPHIR Cancellation and Refunds document.

11. Limited Retention After Deletion

OPHIR deletes or de-identifies active user data in accordance with its approved retention schedule unless continued retention is required or permitted by law.

Limited information may be retained longer where necessary to:

• document receipt, verification, and completion of the request;
• comply with tax, accounting, consumer, or other legal obligations;
• maintain records of consents, withdrawals, complaints, and legal requests;
• prevent fraud, abuse, and re-registration by a blocked user;
• detect, investigate, and document security incidents;
• establish, exercise, or defend legal claims;
• resolve disputes, refunds, and chargebacks;
• comply with a binding order from a court or public authority.

Backups are deleted or overwritten during their ordinary cycle. Until then, they are isolated from ordinary use and restored only for appropriate continuity, security, or legal compliance purposes. If restoration returns previously deleted data to an active system, OPHIR reapplies the deletion request within a reasonable period.

Retained information is limited to what is necessary, protected by appropriate safeguards, and not used for ordinary personalization or marketing. Properly de-identified information that can no longer identify an individual may be retained for analytics, security, and Service improvement.

12. Timing and Completion Confirmation

After receiving a request, OPHIR:

• acknowledges receipt and requests verification information where necessary;
• assesses the request's scope and applicable exceptions;
• completes the request within the period required by applicable law;
• reports completion or explains a permitted delay, limitation, or refusal;
• for account deletion, confirms account closure through an available method.

For applicable access or correction requests in Quebec, a written response is generally provided promptly and no later than 30 days after receipt of the request. Other requests are handled within the period required by the applicable law and the nature of the operation.

If deletion requires manual review or completion of a technical process, we will provide the expected timing. Ordinary account access may end before deletion from backups and limited-retention systems is complete.

13. When a Request May Be Limited

OPHIR may decline to complete a request in full only if and to the extent permitted or required by law. Possible reasons include:

• the requester's identity or authority could not reasonably be verified;
• retention is required by law;
• disclosure would affect another person's rights, security, or privacy;
• information is protected by legal privilege;
• data is needed to investigate fraud, an incident, or a violation;
• information is needed for an existing or anticipated legal claim;
• the request is manifestly unfounded, excessive, or prohibited by law;
• the data has been properly de-identified and no longer relates to an identifiable individual.

If a request is limited or refused, OPHIR will provide a written explanation and information about available review or complaint options where required by law. We do not refuse a request merely because completing it is inconvenient.

14. Authorized Representatives

You may act through a legally authorized representative. The representative must identify the person on whose behalf they are acting, describe the scope of their authority, provide appropriate written authorization or another required document, and complete reasonable identity verification.

OPHIR may contact the account holder directly to confirm the representative's authority where lawful and appropriate. If the request concerns a deceased or legally incapable person, special rules apply and additional proof of status may be required.

15. Request Security

To reduce the risk of fraud:

• use the email address associated with the account;
• confirm the sender's domain before following a link;
• do not disclose your OPHIR, Apple, Google, or online-banking password;
• do not send a full card number, PIN, or one-time code;
• redact unnecessary financial information from screenshots;
• promptly report a suspicious request or unauthorized access to support@joinophir.app.

OPHIR may send necessary messages to verify the request, confirm deletion, and protect the account even if you opted out of marketing communications.

16. Complaints and Supervisory Authorities

If you believe a request was handled incorrectly, first contact the OPHIR Privacy Officer:

privacy@joinophir.app

Include the date of the original request, the account email address, a concise description of the issue, and the outcome you are seeking. Contacting OPHIR does not limit your right to complain to a competent authority.

For Quebec:

Commission d'accès à l'information du Québec
https://www.cai.gouv.qc.ca

At the federal level, where applicable:

Office of the Privacy Commissioner of Canada
https://www.priv.gc.ca

17. Changes to This Guide

OPHIR may update this guide when the application, procedures, providers, or law changes. The updated version will show a new date. Material changes may be communicated in the application, by email, or on the website where appropriate or required by law.

Changing this guide does not reduce rights that already apply to a submitted request and does not limit rights that cannot be waived.

18. Contact Information

For privacy questions, account deletion, and data rights:

privacy@joinophir.app

Technical support: support@joinophir.app
General and legal inquiries: contact@joinophir.app
General information: hello@joinophir.app

Do not send an online-banking password, full payment-card number, PIN, card security code, one-time code, or other secret credentials.