Account and data deletion

1. Overview

Deleting your account permanently removes your TaxApp UK account and the personal data we hold about you. You can’t undo this.

Uninstalling the app or disconnecting HMRC doesn’t delete your account. We do not use your data for advertising. We do not sell your personal data.

2. How to delete your account

In the app: sign in, open the user menu and choose Delete account. The app shows what we delete and what we keep, and offers to download a copy of your data first. When you confirm, your account is deleted straight away.

By email: if you can’t sign in, email [email protected] from the address you sign in with, with the subject line Account deletion request. We may ask you to confirm your identity before we delete anything.

3. What we delete

We delete the following, except where UK law requires us to keep a record (section 4):

1. Saved tax scenarios — your saved calculations and the figures you entered.
2. Businesses and records — businesses, transactions, contacts, properties, tenancies, projects, invoices and import settings.
3. Receipts and attachments — photos and files attached to your records, and invoice PDFs.
4. Profile — your name, mobile number, UK nation and address.
5. HMRC connection — your HMRC access tokens, encrypted National Insurance number and Making Tax Digital profile.
6. Feedback — feedback you sent us, including any screenshots.
7. Your sign-in — your Microsoft Entra External ID sign-in. Microsoft erases it completely within 30 days.
8. Data on this device — when you delete in the app, copies of your data saved on that device for offline use.

4. What we keep

UK law requires us to keep some records after your account is deleted:

1. HMRC submission records — records of anything you submitted to HMRC through Making Tax Digital, and HMRC’s responses, are kept for up to 13 years from the date of submission under UK tax record-keeping law (see our privacy policy). The right to erasure doesn’t apply to them during that time.
2. Security and fraud-prevention logs — limited technical records, such as correlation IDs and the device data sent in HMRC fraud-prevention headers, kept for the periods in our privacy policy.
3. Backups — deleted data can stay in encrypted backups until they expire. We never restore a deleted account from a backup unless the law requires it.

Technical detail on HMRC audit retention is published here: retention-policy.md.

5. Response times

Deletion in the app happens straight away. For requests by email, we aim to acknowledge your request within 30 days of receipt, and we will complete deletion or explain the outcome (including any data kept under section 4 and the legal basis) within the timelines required by UK GDPR, typically within one month of receipt unless an extension applies for complex requests.

If you have a question about deletion or disagree with what we keep, email [email protected]. If we refuse part of a request, we will explain why. You can complain to the Information Commissioner’s Office (ICO) if you’re unhappy with how we handle your data.

6. Related information

See our privacy policy for how we process personal data and your wider rights. See our terms of use for service terms.