Data Retention & Disposal Policy

We retain personal data only as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Data is categorized by type, and each category has a defined retention period. When the period expires, data is disposed of according to the procedures in Section 4.

If we are legally required to retain data for a longer period — for example, to comply with a law enforcement request, litigation hold, or financial regulation — we will retain only the specific data covered by that requirement and dispose of it once the obligation ends.

When data reaches the end of its retention period, Homina disposes of it using the following methods:

• Database records. Production records are permanently deleted via hard-delete operations. Soft-deleted or deactivated content is purged within 14 days of the deletion request.
• Encrypted backups. Backups are retained for 35 days on a rolling schedule. After 35 days, backup snapshots are overwritten by newer backups, making the expired data unrecoverable. Account-deletion requests are fully reflected after the next backup cycle (no more than 35 days).
• Authentication data. When an account is closed, authentication credentials, session tokens, and refresh tokens are revoked and purged immediately. Multi-factor authentication factors and hashed backup codes are deleted.
• Bank connection data. Unlinking a bank immediately stops new data from being imported. Cached account, balance, and transaction data fetched through Plaid is deleted within 14 days. Plaid’s own connection is revoked, and you may additionally remove the Homina connection from your Plaid Dashboard at any time.
• End-to-end encrypted chats. Messages are stored only in encrypted form and are deleted when a user deletes them or when the containing pod is dissolved. Encryption keys for deleted messages are destroyed.
• Files & media. Uploaded files (e.g., profile photos) are deleted from object storage, and their storage references are removed from the database within 14 days.
• Third-party processor data. Where a processor (such as Plaid or Stripe) retains data independently, we request deletion through their APIs or dashboards, though the processor’s own retention terms may apply.

Deletion operations are logged in our audit system so that Homina can verify that data was disposed of within the required timeframe. Audit records of the disposal actions themselves are retained for 3 years.

You can request deletion of your account and associated data at any time by contacting support through the Homina app. We complete verified account-deletion requests within 14 days. After deletion, your data is removed from production systems and becomes unrecoverable after the backup window closes (no more than 35 days).

Certain records — such as transaction history and billing records — may be retained for the periods listed above to meet legal and tax obligations, even after your account is closed. These records are minimized and access-restricted.

If we make material changes to our retention periods or disposal procedures, we will update the effective date above and notify you in the app before the changes take effect.

Questions about this policy? Reach us through the Support section of the Homina app menu, or see our Security overview and Privacy Policy.