Data Retention and Disposal Policy
Last updated: October 2, 2026 | Ardevio, operated by BM Martin Services, LLC
1. Purpose
This policy establishes the principles and procedures governing the retention, storage, and secure disposal of personal and financial data collected by Ardevio ("the App"). It is designed to ensure compliance with applicable data privacy laws including the California Consumer Privacy Act (CCPA), and other applicable US state privacy regulations.
2. Scope
This policy applies to all personal data collected and processed by Ardevio, including:
| • | User account information (name, email address, authentication credentials) | |
|---|---|---|
| • | Financial data retrieved via Plaid Technologies, Inc. (investment holdings, account balances, investment transactions, cost basis, brokerage account identifiers) | |
| • | Plaid access tokens stored on behalf of users | |
| • | Values derived from that data (daily value snapshots, performance recaps, alerts) and information users enter in the app (manual assets, account names, targets and limits) | |
| • | Push notification device tokens | |
| • | In-app subscription entitlement status and Apple transaction identifiers | |
| • | Sign in with Apple authorization tokens | |
| • | Crash and diagnostic data, and IP addresses, processed by hosting and crash-reporting providers |
3. Data Retention Schedule
Data Category
- Retention Period
- Justification
- User account data (name, email)
- Duration of active account
- Required to provide the Services
- Authentication credentials
- Duration of active account
- Required for account access and security
- Financial holdings data (via Plaid)
- Duration of active account
- Core functionality of the Services
- Plaid access tokens (encrypted at rest)
- Duration of active account or until user disconnects account
- Required to sync financial data on behalf of user
- Investment transactions, derived snapshots and recaps, and user-entered data
- Duration of active account
- Core functionality of the Services
- Push notification device tokens
- Duration of active account or until the user disables notifications
- Required to deliver notifications the user has enabled
- Subscription entitlement status and Apple transaction identifiers
- Duration of active account
- Required to provide Pro features
- Sign in with Apple authorization token (encrypted at rest)
- Duration of active account; revoked with Apple on account deletion where held
- Required to revoke the user's Sign in with Apple authorization on deletion
- Crash and diagnostic data, IP addresses
- Held by our hosting and crash-reporting providers under their own retention schedules
- Required to operate and secure the Services and fix errors
Personal data is deleted from our active systems when a user's account is terminated. Data held by third-party providers, and limited records we are required or permitted to keep (see Section 6), are handled as described there.
4. Data Deletion Procedures
4.1 User-Initiated Deletion
Users may permanently delete their account and all associated data at any time directly from within the Ardevio app:
| 1 | Navigate to Settings → Danger Zone → Delete Account | |
|---|---|---|
| 2 | Confirm the deletion request | |
| 3 | The system first asks Plaid to remove each linked financial institution connection and, where we hold the authorization, revokes the user's Sign in with Apple authorization with Apple. Both steps are best-effort and do not block deletion. | |
| 4 | The system then immediately deletes the user's data from our active systems in a single transaction, including holdings, transactions, linked institutions and Plaid access tokens, drift targets and preferences, value snapshots and recaps, user-entered data, device tokens, subscription records, and the user account record. |
Deletion from our active systems is permanent and irreversible, and we cannot restore a deleted account. Copies held by third parties, and limited records described in Section 6, are not removed by this step.
4.2 Support-Assisted Deletion
Users who are unable to access their account may request data deletion by contacting us at [email protected]. We will process the request within 30 days of verification of identity.
4.3 Plaid Access Token Revocation
Upon account deletion, we request removal of each of the user's Plaid connections, and all Plaid access tokens associated with the user are removed from our database. Users may also disconnect individual financial accounts at any time from the Accounts section of the app, which removes the corresponding Plaid access token without requiring full account deletion.
5. Data Security During Retention
While data is retained, the following security measures are in place:
| • | Encryption at rest: Plaid access tokens are encrypted using AES-256-GCM | |
|---|---|---|
| • | Encryption in transit: All data transmitted between the app and our servers uses TLS/HTTPS | |
| • | Access controls: All API endpoints require JWT authentication; data is strictly scoped to the authenticated user | |
| • | Minimal data collection: We collect only the data necessary to provide the Services |
6. Third-Party Data Processors
We use Plaid Technologies, Inc. as a third-party data processor for financial account aggregation. Plaid's own data retention and deletion practices are governed by the Plaid Privacy Policy. Upon account deletion in Ardevio, we remove all Plaid access tokens from our systems, which terminates our ability to retrieve data from Plaid on behalf of that user.
We also rely on other service providers: Apple (Sign in with Apple, in-app purchases, and push notifications), Railway (hosting), Sentry (crash reporting), and Resend (email). Each of these providers maintains its own logs, backups, and records under its own retention policies, which we do not control and which may change. Deleting an account in Ardevio does not delete data these providers hold under those policies; users should consult each provider's privacy policy for details.
We keep a limited administrative audit log of actions taken by Ardevio administrators. When a user deletes their account, that user's email address is removed from the log; the record of the action itself is kept.
7. Policy Review
This policy is reviewed at least annually, or whenever there is a material change to the Services, applicable law, or data processing practices. The "Last updated" date at the top of this document reflects the most recent review.
8. Contact
Questions or requests regarding this policy should be directed to:
- BM Martin Services, LLC, DBA Ardevio [email protected]