Delete my account
This is the canonical Google Play / App Store data-deletion endpoint.
What gets deleted
- Your profile (email, locale, country, preferences).
- Every monitored contact you've added.
- All presence events we've recorded.
- Push notification tokens.
- Subscription state (Apple / Google receipts continue to live with the platform per their own policies).
What we keep — and why
- Audit log records (5 years): regulator + tax law. These contain no message content and become un-joinable to a real person once your profile is gone.
- Payment metadata (10 years): Turkish tax law (VUK md. 253). No card numbers; only amount, currency, provider, txid.
Timeline
- Now: your account is soft-deleted. You're signed out everywhere, every active session is invalidated, and the account is locked from sign-in.
- 30 days later: hard delete runs automatically. Every personal-data row is cryptographically erased. The two retention exceptions above remain, anonymised.
If you change your mind within the 30-day window, email [email protected] from the same address you signed up with — we can restore.
Two ways to request deletion
Option A — quick, requires your password
This signs you in, calls our standard erasure endpoint, and signs you back out. Your account is locked immediately and queued for hard-delete in 30 days.
Option B — without password
If you can't sign in (forgot password, lost device, etc.), email
[email protected] from
the same address you signed up with. Subject line:
Delete my account. We'll confirm within 72 hours and
process within 7 days.
Need anything else?
Full data export (Article 15): in the app, Settings → Privacy → Export. Off-app: email [email protected]. Reply with a signed PDF download link within 72 hours.
Read the full Privacy Policy →
Lumio is an independent family-safety tool and is not affiliated with, endorsed by, or sponsored by WhatsApp LLC or Meta Platforms, Inc. WhatsApp is a trademark of WhatsApp LLC. Lumio works only with best-effort online/offline presence signals for accounts you are authorized to monitor, and never reads messages or content.