Account and data deletion

1. Overview

You can ask us to delete your TaxApp UK account and the personal data we hold about you in connection with the service. Deleting your account is separate from disconnecting HMRC in the app; see section 2 if you want both.

We do not use your data for advertising. We do not sell your personal data.

2. How to request deletion

Email us from the address linked to your account:

1. Send a message to [email protected] with the subject line Account deletion request.
2. State that you want your TaxApp UK account and associated data deleted.
3. Include the email address you use to sign in (your Microsoft Entra External ID sign-in).
4. If you connected HMRC, say whether you also want your HMRC connection removed from TaxApp UK (we will revoke stored HMRC tokens as part of account deletion where applicable).

We may ask you to confirm your identity before processing the request.

Disconnecting HMRC in the app or uninstalling the application does not delete your account or all data we hold. Use this process for a full account deletion request.

3. What we delete

When we approve your request, we delete or anonymise personal data we control that is no longer subject to a legal retention obligation, including where applicable:

1. Saved tax scenarios and calculation inputs stored in our application database.
2. Profile fields we store (for example mobile number and country/nation held in Microsoft Graph via our profile API).
3. HMRC OAuth tokens and connection state stored for your user.
4. Encrypted National Insurance number and HMRC integration profile data stored for your user.
5. Other application-held records keyed to your user identifier, except data we must retain under section 4.

Your sign-in identity is managed by Microsoft Entra External ID. After we process deletion on our side, you may also need to remove or close your identity account through Microsoft if you no longer want that sign-in to exist.

4. Data we may retain

We may be required or permitted to retain certain data after an account deletion request, including:

1. HMRC MTD submission audit records — retained for up to 13 years where UK statutory and regulatory obligations require (see our privacy policy). Erasure requests that affect these records are assessed case by case; the right to erasure may not apply while the legal obligation applies.
2. Security, fraud-prevention, and compliance logs — limited technical records (for example correlation identifiers, IP-derived data, and device telemetry used for HMRC fraud-prevention headers) may be kept for the periods described in our privacy policy and internal retention policy.
3. Backups — deleted data may persist in encrypted backups until those backups roll off according to our backup schedule; we do not restore deleted accounts from backup except where required by law.

Technical detail on HMRC audit retention is published here: retention-policy.md.

5. Response times

We aim to acknowledge your request within 30 days of receipt. We will complete deletion or explain the outcome (including any data retained under section 4 and the legal basis) within the timelines required by UK GDPR, typically within one month of receipt unless an extension applies for complex requests.

If we refuse part of your request, we will explain why and tell you about your right to complain to the Information Commissioner’s Office (ICO).

6. Related information

See our privacy policy for how we process personal data and your wider rights. See our terms of use for service terms.