Minori is in development. App access is by invitation only.Contact us
How long Minori keeps each piece of information, and how it is deleted.
| Data | Retention | End |
|---|---|---|
| Minori profile (internal identifier, email received from Noriven Auth, language, preferences) | As long as the account is open | Deleted within 30 days after account closure |
| Financial data (accounts, transactions, budgets, categories, Split, rules, net worth) | As long as the account is open, or until you erase it | Deleted on erasure, or within 30 days after closure |
| Plaid access token | As long as the connection is active and the sync entitlement exists | Removed at Plaid and deleted immediately on disconnection, consent withdrawal, end of an unconverted trial, account closure, or before the end of the UTC month in which the entitlement ends |
| Data imported from a bank before it is disconnected | Kept as your history, which you can erase | Deleted on erasure or within 30 days after closure |
| Bank connection metadata (institution, status, last refresh) | As long as the related history exists | Deleted with that history |
| Notifications received from Plaid (type, code, date, fingerprint, no financial content) | 90 days | Weekly purge |
| Sync jobs (status, attempts, error code) | 90 days after completion | Weekly purge |
| CSV import deduplication register (fingerprint and row count, never the file) | Same as the financial space | Deleted with the space |
| Sign-in sessions | 30 days at most | Deleted on expiry, sign-out or closure |
| One-time codes (second factor, verification) | 15 minutes at most | Deleted on use or expiry |
| Devices remembered for the second factor | 90 days after last use | Forgotten automatically, or on request |
| Minimal audit log (event, date, internal identifiers, counts) | 3 years, the civil limitation period in Québec | Weekly purge |
| Proof of consent (accepted version, date) | Life of the account, plus 3 years | Weekly purge |
| Application and server logs (no bank content or secrets) | 30 days | Automatic rotation |
| Security logs (administrative access, authentication failures) | 12 months | Automatic rotation |
| Encrypted database backups | Rolling 30 days | Automatic deletion through a storage lifecycle rule |
| Billing data (customer and subscription references, invoices, status) | 6 years after the end of the fiscal year, as required by federal and Québec tax law | Annual purge |
| Support conversations and rights requests | 2 years after the last exchange | Weekly purge |
| Confidentiality incident register | 5 years after the incident became known | Annual review |
| Inactive accounts | Email notice after 24 months without sign-in | Closure and deletion 60 days after the notice, without a reply |
.minori files and exports you download stay on your device. Minori cannot access or delete them.
When a subscription or trial ends, syncing stops. A scheduled job removes your connections at Plaid before the end of the UTC month, then deletes the tokens. Data already imported remains viewable and exportable in the free version.
You start the erasure from Settings, after a preview of what will be deleted. In a shared space, your partner’s data is kept unless the owner explicitly chooses to delete the shared space.
For a request to access, correct, delete, withdraw consent, de-index or port your data, write to contact@minorifinance.com. We reply within 30 days of receipt. The request and the reply are recorded.
| Control | Status as of October 12, 2026 |
|---|---|
| Erasure of financial data from the app | In place |
| Account closure | In place, to be completed with removal of bank connections |
| Deletion of expired sessions | In place |
| Plaid removal on disconnection, entitlement end and closure | To do, with bank syncing |
| Weekly scheduled purge | Implemented; enabled with production |
| 30-day encrypted backups with lifecycle rule | To do |
| Notice and deletion of inactive accounts | To do |
