Skip to main content
Join the waitlist

Delete your account.

There are two routes and neither of them involves talking anyone out of it. If you own the workspace and can sign in, the control is in the app and it takes one screen. If you cannot sign in, or you are a member of a workspace somebody else owns, the form further down this page composes the request to our support address and needs no account.

Two routes

Pick your situation.

If you can sign in

Open Lupee and go to Settings, then Data. The delete control is the last group on that screen, it lists what is about to go, and it asks you to type the word DELETE before it runs. It is the same control on every surface the app is opened on.

That control deletes the whole workspace, so only the workspace owner can run it. If you are a member of a workspace somebody else owns, the control is disabled and the app says so on the screen. The route for you is the form further down, which asks for your account rather than for theirs.

Removing the app from a phone does not delete the account, and it does not cancel a subscription. Only the delete control does the first, and only a cancellation does the second.

To stop one channel rather than everything, open Connections and turn it off. That ends the reading immediately and leaves the rest of the account alone. It is not a delete: the text already stored from that channel runs out on your retention window, and deleting the workspace is what removes it at once.

If you cannot sign in

Use the form below. It needs no account, and you do not have to explain why. We may ask you to confirm that the account is yours before we act, because a deletion request from the wrong person is a data breach with a polite subject line. We will not ask for more than we need to establish that.

If your email address has changed and you can no longer receive mail at the address on the account, say so in the request and tell us what you can prove instead.

If you share a workspace with other people

There are two different deletions, and the difference only matters once a workspace has more than one member in it.

Deleting the workspace removes everything held in it, for everyone in it: the stored messages, the commitments, the connections and the workspace itself. That is what the in-app control runs, and it is why it is limited to the owner.

Deleting only your account removes you: your sign-in, your sessions and your membership. The workspace stays where it is, and so does the message text and the commitment history stored in it, because that data belongs to the workspace and the people still in it rather than to you alone. The one exception is that if you were the last member, the workspace is deleted with you.

Say which of the two you want in your request. If it is not clear from what you send us, we will ask before we run anything, because neither one can be reversed into the other afterwards.

Deleting is not the same as cancelling

Cancelling a paid plan stops the next renewal and leaves your account and your data where they are. Deleting your account removes the data. If you want both, do both, and say so in the request if you are using the form. Everything is bought on the web today, so a cancellation is ours to make; once the phone apps are in the stores, anything bought inside one will be cancelled at Apple or Google instead. What a refund covers is set out in the refund policy, and the paid plan itself is managed on the billing page.

What goes

What a deletion removes.

This is the whole list for the case where everything goes: your account and the workspace with it. If you are one of several members deleting only your own account, the stored message text, the commitments, the confirmation history and the connections stay with the workspace, and your account data and your device tokens go with you. Nothing in this list is archived, anonymised or held in a soft-deleted state you cannot see.

  • Stored message text

    The text of messages from every channel you opted in to, along with the sender names, channel names, timestamps and permalinks stored beside it.

  • Extracted commitments and their history

    Every item in your inbox and your chase list, with its owner, due date, state and source link.

  • Confirmation history

    Which candidates you accepted and which you rejected. It is what gives each item its state, and it goes with the rest.

  • Connection data and access tokens

    The credentials and scopes for each Discord server, Telegram group and Slack workspace you connected, and the record of which channels were enabled.

  • Account data

    Your email address, name and avatar if you gave them, the sign-in method you used, your plan, your language and timezone, and your settings including the retention window you chose.

  • Device and push tokens

    The registrations that let the app send you a morning brief or an evening close on a phone.

One thing worth knowing before you press it. A channel contains messages written by other people, and a deletion here removes only the copies we hold. It has no effect on Discord, Telegram or Slack themselves, where the original messages stay exactly as they were. We cannot delete anything from those platforms and we would not want the ability to.

How long it takes

How long it takes.

We are not going to publish a faster figure here than the one we committed to in the policy, because the policy is the promise.

Within 30 days

Records are deleted from live systems. In practice the in-app control acts immediately and the queued work finishes well inside the window, but 30 days is the outer limit we hold ourselves to and it is the number you should rely on.

A further 90 days

Backups are held for at least 35 days and expire at 90, so 90 is the number to plan around and it is the outer limit. Backups are restored whole in a disaster, never selectively for a single record, so a deleted record is not brought back by a restore that happens after it went.

If you send a request through the form rather than using the in-app control, we answer within one month, which is the response time the privacy policy commits to for a rights request. A complex request can be extended by up to two further months, and if that ever happens we tell you inside the first month and say why. There is no charge.

What stays

What is kept, and why.

A deletion page that only lists what goes is not telling you the truth. These are the exceptions. The first four are the retention periods set out in the privacy policy, the last is the one technical record our deletion job is written to leave behind, and none of the five contain your messages or your commitments.

Billing records and invoices

As long as tax and accounting law requires, typically 6 to 10 years

This is the category that survives because the law says it must. An invoice is a tax record before it is a record about you, and no company can delete one on request. It holds what was bought, when, for how much, and the billing identity attached to the payment. It does not hold your messages or your commitments.

Records needed to defend a legal claim

Only where such a claim exists

If there is a live dispute, the records that bear on it are held until it is resolved. In the ordinary case there is no such claim and nothing is held under this heading.

Aggregated statistics

Indefinitely

Counts that cannot identify you and cannot be traced back to you, such as how many workspaces connected a given platform in a month.

Support correspondence

24 months

The emails you sent us and the replies we sent you. If you want that thread deleted too, say so in the request and we will delete it, subject to the same legal exceptions above.

A one-way hash of the trial claim

Indefinitely

A single value, derived so that it cannot be turned back into an email address or a name, kept so that a deleted account cannot be opened again for a second free trial. It is the only technical record that outlives a deletion, it identifies nobody on its own, and it holds no message text, no commitment and no connection.

Request form

Ask without signing in.

Fill this in and it composes the request for you. It does not post anything to us on its own, so you send it from your own mail app and keep the copy.

What should be deleted

If you signed in with Apple and used the private relay address, give the relay address. It is the one we hold.

Do not put passwords, tokens or card numbers in here. We never need them, and email is not the place for them.

Nothing is sent from this page. The button opens a message you send yourself, so you keep a copy of what you asked for and when.

Or copy this and send it from any mail app

To: support@lupee.app
Subject: Account deletion request

Delete my account and my access to it.

Account email: (not filled in)

Detail: (none given)

I am asking for this deletion myself. I understand you may ask me to
confirm that the account is mine before you act on it, and that billing
records are kept for as long as tax and accounting law requires.

If the button does nothing, your browser has no mail app registered. Copy the text above into any mail client and send it to support@lupee.app. For a wider data rights request, such as a copy of everything we hold about you rather than a deletion, write to privacy@lupee.app.

Related

Related pages.