Delete your Bolehlah account

What we delete

• Your sign-in: the email address and name on your login, your password, your authenticator secret and your recovery codes. Your login is closed and every signed-in session is ended.
• Your sign-in links and devices: Google, Apple and Facebook sign-in links, passkeys, approval devices, linked devices and push-notification tokens.
• Your chat history with B (your own conversations) and the codes we sent to verify your email or phone.
• Bolehlah's own research copy of what you uploaded is deleted, and the personal details in our screening notes about it (such as employer, income and deductions) are cleared.
• Your links to a koperasi's chat channels (its Telegram bot, web chat and email) are ended, so those channels no longer recognise you. The messages already exchanged stay with the koperasi (see below).
• Public checks of your statements: scanning the code on a statement issued to you no longer confirms it.
• Apple Wallet: we stop updating your pass and remove its notification token. A pass already on your phone stays there until you remove it.
• If no koperasi lists you as its member, we also delete your name, phone number and email address from your member record, your saved profile details (such as your address), and the copy of your IC number held with your account record. We keep a coded fingerprint of your IC number so that if you sign up again with the same IC you reconnect to your record. Your IC number itself still appears in some of the records we keep (see “What we keep”).

What we keep

Deleting your account does not delete the records below. Some are kept because the law, or a koperasi's own obligations, require it; the others are kept while we confirm whether they may be deleted. This page does not promise a date for deleting any of them.

• Consent records, signatures and audit trails — what you agreed to and signed, and the record of actions taken on your account.
• Your uploaded documents — such as IC scans and payslips — and our records of them. An IC scan shows your IC number, so the number stays there.
• What our document reader read from your uploads — the text and figures it extracted (such as your IC number, employer, income and deductions) stay stored with your uploaded documents, hidden from our tools.
• Your identity-check (eKYC) records — the result of your identity check and what was captured for it.
• Your Bolehlah Points and rewards — your points balance, reward history and referral records stay with your member record and are not deleted. If you sign up again with the same IC, they are yours again.
• Other records about you — such as the checks run on your account (for example ANGKASA screening) and the credit summary our AI prepared from your details.
• Your koperasi's own records — if a koperasi lists you as its member, its record of you stays with that koperasi under its own obligations: your membership details and its own corrections, and the statements it issued to you. In that case your name, contact details, IC number and profile details stay on that record too. The messages you exchanged with a koperasi over its chat channels also stay with that koperasi. Deleting your Bolehlah account severs the connection between your account and the koperasi's record; if you sign up again later, the two reconnect. To have the koperasi erase its own record, ask the koperasi directly.

These records are not deleted when your account is deleted. If you want to know more about any of them, email hello@bolehlah.ai.