| Data | How long |
|---|---|
| Account profile | Until you delete your account |
| Text of your messages with the assistant and text-message logs | Our policy is to blank the text 24 months after it was written, leaving only a record that a message existed and when. That automatic cleanup is being rolled out in stages; until it has run over a message, the text is kept until you delete your account |
| Voice notes recorded in the app | Our copy is deleted right after the note has been transcribed. Any clip left over is deleted within 1 day. The transcript is kept like a typed message |
| Voice notes and photos sent by text or WhatsApp | The transcript follows the message rules above; media is kept until you delete your account |
| Masked text threads | Close after 48 hours of inactivity |
| Shopping agent task history and screenshots | Kept until you delete your account. They do not expire on their own yet |
| Shopping agent sign-ins | The cloud browser does not keep a signed-in session. Each task starts signed out and asks you to sign in again; any session left over is discarded at the start and end of every task. A saved login on your phone (see the Privacy Policy, Section 2.13) stays on your phone and is never sent to us. When a cloud task needs it, a sealed copy is typed in once and deleted |
| Staff invitations | Expire after 14 days |
| Claims, purchases, receipts, orders, tax and wallet records | Kept as long as the law requires, then deleted or de-identified. The cleanup of old messages and voice never touches reward, claim, receipt, payment, order, wallet, escrow, refund or tax records |
| Blockchain transactions | Permanent and public; we cannot erase them |
| Security and fraud logs | Kept as needed to protect the service |
Getting a copy of your data
In the app, open Settings → Download my data. You get one private file with your own data. It leaves out passwords, tokens, secrets and screenshots, and shows connected tools only as connected or not. The download link works for 24 hours, the file is deleted after 48 hours, and you can make one export per hour. It also lists wallets that Lucilla manages for you, marked server-managed.
Deleting your account
Use Delete account in the app, or the web form. We email a link that you confirm within 24 hours. Your account then has a 30-day grace period, during which signing in cancels the deletion. A daily job then deletes your account data, including everything the shopping agent kept: task history and pictures, sealed logins, queued tasks, and the delivery and buyer details used for checkouts. Anything we must keep by law is kept only for that purpose. A wallet that Lucilla manages for you is kept (not unlinked) when you delete your account, so any funds in it are not stranded. Your own passkey wallet stays yours on the blockchain. Deleting the Ask Lucilla account does not delete a separate Lucilla fitness account.
Questions: support@asklucilla.com.