Data Retention & Deletion Policy

01 Principle

Keep what you use. Delete what you ask us to. Hold nothing longer than we need.

Reis Media LLC retains personal data only for as long as it is needed to provide Mythox to you, to meet a legal obligation, or to resolve disputes and enforce our agreements. When data is no longer needed for those purposes, it is deleted or anonymized.

02 What we keep & how long

Data	Retention
Account data (email, name, settings)	While your account is active; deleted on account deletion.
Financial data (Plaid, CSV or manual transactions)	Until you disconnect the source or delete your account; Plaid tokens revoked on disconnect.
Time / energy data (Rize, Whoop, manual)	Until you disconnect the source or delete your account.
Content you create (goals, journals, systems, notes, products)	While your account is active; deleted on account deletion.
Billing records	Retained as required for tax/accounting law (typically up to 7 years), held by Stripe and in our records.
Encrypted backups	Short rolling window, then automatically overwritten (see Section 5).
Operational/usage logs	Kept briefly for security and troubleshooting, then rotated out.

03 How you delete your data

You can delete your data at any time:

By email — write to admin@philipereis.com and ask us to delete your data. We verify the request comes from you, then carry it out. This is the current method, and it fully removes your data.
In the app — disconnecting a connected source removes that data; a one-click "delete my whole account" control inside the app is a planned addition.

See the Account & Data Deletion page for the step-by-step request process.

04 What happens when you delete

Your account and personal data are removed from our active database, normally within 30 days of your request.
Any Plaid access tokens are revoked, severing the bank connection so no further data is received.
Per-user Row-Level Security means your data was already isolated to your account; deletion removes those rows entirely.
We confirm to you when deletion is complete.

Disconnect vs. delete
Disconnecting a source stops new data and revokes that connection. Deleting your account removes everything we hold about you, subject only to the legal records in Section 6.

05 Backups

We keep routine, encrypted backups of the database so data can be recovered after a failure. Backups are kept for a short rolling window and then automatically overwritten. When you delete your data, any copy still present in a backup is purged on the normal backup rotation — it is not restored into the live system except as part of a genuine disaster recovery, after which the deletion is re-applied.

06 Legal & tax retention

We may retain the minimum information the law requires us to keep even after you delete your account — for example, certain billing, tax and accounting records, or records needed to comply with a legal obligation, resolve a dispute, or prevent fraud. We keep only what is required, for only as long as required, and then delete it.

07 Periodic review

This policy and our retention periods are reviewed at least once a year (and when the law or our product materially changes) to confirm we are not holding data longer than necessary and that our practices are reviewed against our obligations under applicable privacy laws such as the GDPR and California's CCPA/CPRA. The Founder is responsible for this review.

08 Contact

Questions or deletion requests: admin@philipereis.com

Reis Media LLC · 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA.

Information Security Policy Privacy Policy Access Control Summary