Account & Data Deletion

1. Overview

This policy explains how users of the Ctrl Money mobile app and services can request permanent deletion of their account and associated personal data.

Deleting the app from your device does not delete your account. An account deletion request permanently closes your Ctrl Money account and cannot be undone after it has been completed.

2. How to Request Deletion

You can request deletion even if you no longer have the Ctrl Money app installed or cannot access your account.

1. Email support@controlmoney.app from the email address associated with your Ctrl Money account.
2. Use the subject line “Ctrl Money account deletion request”.
3. Include the email address or mobile number registered to your account so we can locate it.

Please do not send your password, one-time password, private keys, full payment details, or identity documents by email. Our support team will acknowledge your request, help you through any required steps, and may ask you to verify that you own the account before deletion.

3. Before We Can Delete Your Account

Because Ctrl Money provides financial services, we may need you to complete certain steps before the account can be closed. Depending on your account, this may include:

• withdrawing or transferring any remaining balance;
• closing or redeeming open positions;
• allowing pending deposits, withdrawals, or transactions to settle;
• resolving an outstanding payment, dispute, restriction, or investigation; or
• completing an identity or account-ownership check.

If any of these steps apply, our support team will explain what is needed and help you complete the process. We will not use these steps to unreasonably delay a valid deletion request.

4. What We Delete

Once your request is verified and any required account-closing steps are complete, we will delete or irreversibly anonymise personal data associated with your account that we are not required to retain. This may include:

• your account profile and contact information;
• login credentials, active sessions, and device associations;
• app preferences and settings;
• marketing preferences;
• support information that is no longer required; and
• analytics or usage data that can reasonably be linked to you.

We will also instruct relevant service providers that process data on our behalf to delete or anonymise eligible data, subject to their legal obligations.

5. What We May Retain

We may retain limited information where necessary to comply with legal, regulatory, tax, accounting, anti-money-laundering, fraud-prevention, security, dispute-resolution, or law-enforcement obligations. This may include:

• identity-verification and KYC/AML records;
• transaction, payment, wallet, and account-ledger records;
• tax and regulatory reporting records;
• fraud-prevention, security, and audit logs; and
• records needed to establish, exercise, or defend legal claims.

These records are retained only for the period required by applicable law or a legitimate legal purpose. Depending on the record and jurisdiction, this will commonly be up to 10 years after the end of our relationship with you, or longer if a regulator, court, investigation, or legal hold requires it. Retained information is access-restricted and is not used for marketing.

Transactions recorded on a public blockchain cannot be altered or deleted by Ctrl Money. We will, where reasonably possible, remove the link between retained public blockchain data and information that directly identifies you, unless we must preserve that link for a lawful reason.

6. Processing Time

We aim to acknowledge requests within 7 business days and complete eligible deletion requests within 30 days after verifying the request and completing any required account-closing steps. We will let you know if applicable law permits or requires more time.

Deleted information may remain in encrypted disaster-recovery backups for up to 90 additional days before it is overwritten through our normal backup cycle. It will not be restored to active systems except where necessary for disaster recovery, security, or legal compliance.

7. Requesting Deletion of Specific Data

If you want to request deletion of specific personal data without closing your entire account, email support@controlmoney.app with the subject “Ctrl Money data deletion request” and describe the data you want deleted.

We will review your request under applicable privacy law and explain if certain information cannot be deleted while your account remains open or while a retention obligation applies.

8. Contact Support

If you have questions, cannot email us from your registered address, or need help preparing your account for deletion, contact:

Ctrl Money Support & Privacy Team
Email: support@controlmoney.app

We will help you verify your account and guide you through the deletion process.

This policy should be read together with our Privacy Policy.