Data Deletion Policy

1. Where your data is stored

Annora stores everything in a single SQLite database file, annora.sqlite, inside the app's private documents directory on your device. Trivartha has no server, no account system and no backup copy of that database. That means:

• You delete your data by using the app — there is nothing for us to delete on your behalf.
• Uninstalling Annora erases the whole database from the device, immediately and permanently.
• Nothing here is tied to your identity, so there is no separate "account deletion" step — deleting the app's data is the equivalent.

This policy describes the deletion behaviour of Annora version 1.0.0 exactly as the app works today, including the parts where a deletion is deliberately partial.

2. Deleting one item

Open the item, tap Delete, and confirm. Annora asks you to confirm first, and then shows a snackbar with an Undo action for a few seconds after the deletion.

What is deleted

• The item record itself — its name, category, unit, barcode, image reference, minimum stock level, storage location, notes and timestamps.
• Every purchase batch belonging to that item — the purchased and remaining quantities, the unit, the price paid, and the purchase, manufacturing and expiry dates.

What is kept

• The spending ledger entry for that item stays, and is marked as reversed. The entry keeps the item name, category, quantity, amount and date that were recorded at the time of purchase. This is deliberate: your monthly totals stay truthful and a removed purchase remains visible in the history rather than the money silently disappearing. You can restore a reversed purchase from the spending history, and delete the entry permanently by reversing it — but the row itself remains on the device.
• A shopping list entry that pointed at that item stays on your list. It simply stops being linked to the deleted item, so you may need to re-point it at a new item.
• The category stays in your category list, because categories are shared between items.

To remove the money from your history as well, follow the deletion with reversing the purchase.

3. Deleting a batch

On the item detail screen, a purchase batch can be deleted on its own — for example when one of two bags of rice is used up and thrown away.

• The batch and its quantities, price and dates are deleted from the inventory.
• The purchase linked to that batch is reversed, not deleted, so that the amount you paid is no longer counted in your monthly total and in your budget, while the history of the transaction stays visible.
• A reversed purchase can be restored from the spending history at any time.

4. Removing a shopping list entry

Swipe or use the menu on an entry in the Shopping tab to remove it. The removal can be undone straight afterwards, and a completed entry is restored with its completed status intact.

• An active entry is removed from your shopping list.
• A completed entry is removed from the completed section as well.
• If the entry had been linked to a confirmed purchase, the entry and its link to that purchase are removed together.

5. Reversing a purchase

In the spending history, a confirmed purchase can be reversed. Reversing it:

• removes the amount from the monthly total, the category breakdown and the budget calculation;
• leaves the entry in the history, marked as reversed, so the removal is visible instead of the money silently disappearing;
• can be undone by restoring the entry.

This is the closest Annora comes to "deleting" a transaction: the record is excluded from every calculation, but the row itself stays in the local database until the app is uninstalled.

6. Clearing the AI key

If you configured the optional AI reader, your API key is stored in the device's secure keystore.

• Clear key in Settings deletes the stored key immediately. No further request can be authenticated, so no further photo can leave the device.
• Switching the AI reader off stops all requests to your provider, but leaves the key in the keystore until you clear it.
• The API address and model name are ordinary settings and can be overwritten in Settings, but they are only removed from the device when the app is uninstalled.

7. What is not deleted by an in-app action

Specifically, the following survive an in-app delete and are removed only when the app is uninstalled:

• Reversed purchase entries in the spending ledger — excluded from totals, but still present in the database.
• Your categories — including any category you created yourself.
• Your budget history — the record of which budget thresholds were already notified, kept so that the same alert is not sent twice for the same month.
• Your preferences — currency, reminder switches, top-up multiplier and onboarding completion.
• The AI address and model name, unless the app is uninstalled.

8. Erasing everything

The single step that removes every trace of Annora's data from the device is to uninstall the app:

Reinstalling Annora afterwards gives you a completely fresh, empty database and the default set of categories.

9. Exported files and backups

Two kinds of copy can exist outside the app, and neither of them is controlled by Annora:

• Files you exported. Export inventory to CSV and the spending export write a file to the app's temporary folder and pass it to the Android share sheet. Once you have shared it, the copy belongs to the receiving app.
• Android device backups. Android may copy the app's private data into your Google account backup. You can exclude Annora from backup in Android Settings → Apps → Annora → Backup.

Photos you scanned with the camera or picked with the photo picker are handled by the operating system and the camera app; Annora reads them for you and does not keep its own copy inside the app.

10. Sending us a deletion request

Because Trivartha holds no central copy of your Annora data, a deletion request sent to us cannot result in us deleting a database record — there is no such record on our side. We will still process your request as follows:

1. We will tell you how to delete the data yourself, using the steps in this policy, and offer to walk you through them by email.
2. If your request concerns data that reached a third party — for example a package photograph sent to the AI provider you configured, or a barcode sent to the Open Food Facts catalogue — we will point you to the relevant provider, because only they can act on their side of the transfer. We will help you identify which provider was involved.
3. If your request concerns our own records — for example your email address if you joined the launch list — we will delete that record from our mail systems on request.

Send requests to support@trivartha.com. We acknowledge requests within 7 days and resolve them within 30 days.

11. Summary

Questions about any of the above: support@trivartha.com. See also the Privacy Policy and the Terms & Conditions.