Leaving Punji?

1. From inside the app (fastest)

1. Open Punji and sign in if you're signed out.
2. Go to Profile (bottom tab) → Account & device security → Delete account. The screen opens with two options:
3. Pause your account — fully reversible. The app locks until you sign back in and resume. Notifications and alerts stop. Holdings, watchlist and history all stay intact. There is no time limit on a pause; resume whenever you want.
4. Delete permanently — your account is scheduled for deletion in 30 days. The app stays usable in that window so you can sign in and cancel the deletion if you change your mind. After 30 days, finalisation runs and everything that identifies you is removed (details in section 3).

2. By email (if you can't sign in)

If you've lost access to the email you registered with, or the app isn't installed, email [email protected] with the subject Account deletion request from your registered address. Include:

• The email address you signed up with.
• A brief confirmation that you want the account and all associated data deleted.

We process email-based deletion requests within 7 business days. We may ask one verification question to confirm the request is from the account holder. We will not delete an account based on a request from a different email address than the one on file. The outcome is identical to the in-app path (section 3).

3. What gets deleted on finalisation

• Your portfolio holdings, transactions, and import history.
• Your watchlist and the symbols you were tracking.
• Your price alerts and their trigger history.
• Your in-app notifications and notification preferences.
• Your home-feed preferences and dismissals.
• Your corporate-event reminders and issue subscriptions.
• Your screener presets.
• Your push notification tokens.
• Your account credentials — the email is overwritten with a non-routable placeholder (so it can be reused for re-signup) and the salted password hash is removed; we never stored the plaintext.

Account access is permanently blocked the moment finalisation runs.

4. What we keep (anonymous, cannot be linked to you)

After finalisation, a single anonymous churn-metric record survives. It contains:

• Signup date
• Days active before deletion
• Counts only: how many holdings, watchlist items, and alerts existed at the time of deletion

Your user ID is replaced with a one-way salted SHA-256 hash whose salt is generated per record and immediately discarded. This means the hash cannot be reversed back to your user ID — even by us. The record helps us understand patterns of account closure without retaining anything that identifies you as a person.

No email, no name, no symbols, no holdings, no transactions.

5. Operational retention windows

• Encrypted backups — purged within 30 days of finalisation. We can't pull an individual record out of a backup without restoring the entire backup, so the backups age out naturally and your data falls off with them.
• Operational logs with personal identifiers redacted — retained up to 30 days, then deleted.
• Crash reports from your sessions (Sentry), with identifiers redacted — kept up to 90 days.
• Product analytics events (PostHog), with identifiers redacted — kept up to 30 days. If you'd like us to expedite removal of analytics events before that window elapses, mention it in your deletion request and we'll submit the per-distinct-id delete on your behalf.

6. Can I create a new account later?

Yes. Once your account is finalised, your original email address is freed — sign up again with the same email and you'll get a fresh user ID with no carry-over from the old account.

7. Why a 30-day grace period?

Account deletion is permanent and irreversible by design. The grace window exists so a deletion you regret — accidental, emotional, or prompted by a transient frustration — can be undone by simply signing back in. After 30 days of no sign-in, finalisation runs automatically. You don't need to do anything to complete the deletion; you only need to act if you want to cancel it.

8. Contact

Questions or trouble with deletion: [email protected]. We read every email — usually replies within 1–2 business days.