Data retention and deletion

Effective May 4, 2026 · Last updated October 8, 2026

NOVA keeps your information only as long as it serves you, then deletes it for good. This page explains how long each kind of information is kept, how it is deleted, and how to ask for deletion. It is part of The Transformation Room's Data Retention and Disposal Policy and sits alongside the privacy policy.

Our principles

• Only what you choose. NOVA collects only what you connect or tell it, and only what a feature needs.
• Only for you. Your information is used to serve you. It is never sold or used for advertising.
• Not kept longer than needed. Every kind of information has a set period, below. When it ends, it is deleted.
• Deleted properly. Deletion is permanent, and access to connected services is revoked with the provider, not just removed from NOVA.
• You decide. You can disconnect an account or ask for deletion at any time.

How long information is kept

• Bank connections (through Plaid). The access token is kept until you disconnect the bank. On disconnect it is revoked with Plaid and deleted within 24 hours. Balances and transactions received from that bank are deleted within 30 days.
• After an account is deleted. Only a one-way fingerprint of the Google account and email and the date its free trial began is kept, so deleting and signing up again doesn’t restart the free trial. It can’t be turned back into an email address and is used for nothing else.
• Statements you import. The file is read on your device and never stored. The rows kept from it are deleted within 30 days of a deletion request or account closure.
• Other connected accounts (Google, Oura and others) and the phone app's access. Kept until you disconnect. Access is revoked with the provider where possible, and the stored credentials are deleted at once.
• Your account and settings. Kept while your account is open. Deleted within 30 days of closing it.
• Two-step verification. Your authenticator secret and backup codes are deleted at once when you turn two-step off or close your account.
• Memories, conversations and things you save. Kept while your account is open. You can undo anything you save, and everything is deleted within 30 days of a request or closure.
• Phone app data (notifications, messages, calls, places and health readings you switched on). Kept while your account is open. One-time codes and promotions are never kept, and work messages keep only who and when.
• NOVA Together. What people share with each other is read live and is not copied into the other person's account, except a short suggestion made from it (such as “Mia’s on a 14-day streak”), which stays on the Together screen for up to 7 days. Cheers are kept for 30 days. An invite link that was never used is deleted 30 days after it expired. A friendly challenge, with everyone's days kept in it, is deleted 90 days after it ends. The record of which suggestions NOVA already offered you keeps only scrambled keys, never the other person's details, for 60 days. Removing someone or deleting your account ends every share at once.
• Activity history and action receipts. Kept for 2 years for security, with no passwords or keys in them, then deleted.
• Backups. The database provider's backups expire on their own within 30 days, and deleted information leaves the backups when they expire.

How information is deleted

• From NOVA's database it is permanently deleted, not just hidden.
• Access tokens and keys are revoked with the service that issued them, so they stop working, and then deleted.
• A backup is never restored to bring back information that was deleted on purpose.

Asking for deletion

1. Email privacy@yournovabrain.com, or use Delete my account in NOVA's Customize (Customize › Privacy & security).
2. We confirm the request comes from you, for example by replying to the email address you sign in with.
3. Your information is deleted within 30 days, and your connected services are disconnected and revoked.
4. We tell you when it's done.

Inactive accounts. If an account isn't used for 12 months, we get in touch. If there's no reply within 30 days, the account is closed and its information deleted.

Legal holds. If the law requires us to keep specific information for a legal claim or a regulator, only that information is kept, and only for as long as required.

Contact

The Transformation Room, 8401 Mayland Dr, Ste A, Richmond, VA 23294, USA · privacy@yournovabrain.com

To delete your whole account, see delete your NOVA account.