Credit Karma

creditkarma.com · finance & banking

Closing the account does not close the file. Money-laundering and tax rules keep your identity and transaction records for years, and a permission to share your data wherever the law allows covers much of the rest. The holds set by statute are the ones no request can move.

Reported incidents

Took in users of the closing Mint budgeting app, with their transaction history

2023-10-31

Affected Credit Karma Net Worth; the Mint app

Intuit said on 31 October 2023 that it was closing Mint, its budgeting app, and invited Mint users to move to Credit Karma, its credit score and recommendations app. PYMNTS reported that Intuit's blog post said Mint would no longer be available from 1 January 2024. Credit Karma's page for Mint users said they could transfer linked accounts from more than 17,000 financial institutions "as well as your entire Mint transaction history", and would lose access to their Mint profile once they moved. Credit Karma's site says it "may be compensated through third party advertisers".

People affected typically ask Credit Karma to confirm whether their information was included, and which categories.

The verified route

dpo@creditkarma.com
Privacy Recommended

Where data goes

What Credit Karma likely holds

What banks typically hold about you, from our industry research, the most sensitive first.

Pick a folder to see where it goes.

Most sensitive

Sensitive

Everyday

Where it goes

Companies under one owner commonly share data with the parent and with each other. The group can hold more about you than Credit Karma does alone.

On Credit Karma's behalf

They handle your data on Credit Karma's instructions. If Credit Karma uses them, a request to Credit Karma should reach them.

Inferred services

Services banks typically use.

ID and age checks Most banks
AI providers Some banks
Card networks and open-banking providers Most banks
Payment, analytics, hosting and support providers Most banks

Get their own copy

A request to Credit Karma doesn't reach them. Each needs its own, and some keep records under a legal duty.

Inferred practices

What banks typically do with your data, from our industry research.

Ad platforms and tracking Most banks
Credit agencies Most banks
Fraud databases Most banks
Insurers and claims registers Most banks
Your data used to train their own AI Some banks

DÆTRAX is a personal data accountability ledger: a dated record of which companies hold your personal data, what you asked them to do about it, and what they claimed in reply.