LumaLedger

Deleting your data

Last updated: September 2026

You can delete your LumaLedger account and the data that goes with it at any time, yourself, without contacting us. This page explains how to do it, what is deleted (including anything we received through WhatsApp), how long it takes, and the few things we keep and why.

How to delete your data

In the app (fastest).

  1. Sign in at lumaledger.app.
  2. Open Settings and scroll to Danger zone.
  3. Choose Delete account and confirm.

Deletion starts the moment you confirm, and you are signed out. If you are the only owner of an organization that other people also use, the app asks you to hand ownership to another member (or delete that organization) first, so nobody else's books disappear without them knowing.

By email. If you cannot sign in, or would rather we do it, email security@lumaledger.app with the subject “Delete my data”, from the email address on your account. We may reply to confirm the request really comes from you, then delete your account the same way the app does and email you when it is done, within 30 days of your request.

Only want to remove WhatsApp? You can disconnect WhatsApp without closing your account: go to Settings → Receipts and choose Unlink next to your number. Messages from that phone stop being accepted straight away. Your WhatsApp chat with the assistant appears in the assistant's conversation list, where you can delete it too.

What gets deleted

  • Your sign-in: your email address, passkeys, remembered two-factor devices, and the name and profile picture you added.
  • Your personal ledger, and every organization where you are the only member: accounts, balances, transactions, categories, budgets, rules, receipts, documents and statements, properties, vehicles, investments, reports, and the files stored with them.
  • Bank connections: we tell Plaid to revoke our access and delete our stored access tokens, so no further data is retrieved.
  • Apps you connected (such as Gmail or Google Drive): the access you granted is revoked and our copy removed.
  • Your subscription: cancelled at Stripe, so you are not charged again.
  • Everything else tied to you: assistant conversations and the files you shared with the assistant, notifications, your notification settings and weekly summary subscription, feedback you sent us, and invitations addressed to your email.

Data we received from Meta (Facebook and WhatsApp)

LumaLedger does not offer Facebook Login and never reads your Facebook profile, friends or activity. The only data we receive from Meta comes through WhatsApp, and only if you link a phone number to your account so you can send receipts to, or chat with, our assistant. That data is:

  • your phone number and your WhatsApp profile name;
  • the messages, photos and files you send to our WhatsApp number.

Deleting your account deletes all of it: the phone link, your WhatsApp conversation with the assistant, and the receipts and files you sent into your own ledgers. If you sent receipts into an organization you share with other people, those receipts stay part of that organization's records, but your phone number is removed from them. If you message our WhatsApp number without linking it to an account, we store nothing; we only reply with how to link.

How long it takes

  • In-app deletion removes your data from our live database immediately, and the stored files right after.
  • Email requests are completed within 30 days, and we email you when they are.
  • Encrypted backups roll over on their own cycle, so a copy can remain in a backup for up to 30 days after deletion. Backups are never used to bring deleted data back into the product.

What we keep, and why

  • Shared organizations. Books you share with other people belong to all of their members. When you delete your account we remove your membership and your personal details, but the transactions and records you added stay in that ledger for the people still using it.
  • Billing records. If you ever paid for Premium, Stripe keeps invoices and payment records for as long as tax and accounting law requires, which can be several years. We do not use them for anything else.
  • Usage analytics and error reports. Our analytics (PostHog) and error-monitoring (Sentry) providers delete these on their own retention cycle. We keep no separate copies.
  • Proof we honored an email request. If you asked by email, we keep that email thread, which holds only your address and the request, to show the deletion was done.

Some copies sit outside LumaLedger and are yours to manage there: your WhatsApp chat history on your phone and with WhatsApp (delete the chat in WhatsApp), and the data Plaid holds about your bank connections, which you can review and delete at my.plaid.com.

Questions

Email security@lumaledger.app. For everything else about how we handle your data, see our Privacy Policy.