Delete your Lonzo account
Request deletion of your Lonzo account and all the data we hold — by email here, without installing the app or signing in, or from Account → Delete account inside the app.
You can request deletion of your account and all Lonzo-held data here, without installing the app and without signing in.
Deletion is permanent once we carry it out
You can cancel your request at any point before we carry it out — reply to us if you asked by email, or write to privacy@lonzo.ai if you asked in the app, where the receipt is a record of the request rather than a control that withdraws it. After we carry it out your account cannot be restored — by you or by us. If you only want to stop the assistant reading your mail, disconnect Google instead (see below).
Request deletion by email
Email privacy@lonzo.ai from the email address on the account with the subject Delete my account. Include:
- the email address of the account, and
- the words "I request deletion of my account and data".
We verify that the request comes from the account's own address, then carry out the deletion. A person handles the request itself — a deletion is never carried out, or refused, by an automatic reply. Writing to support@lonzo.ai also reaches a person, but privacy@lonzo.ai is the address we monitor for this purpose.
Or ask from inside the app
If you can still sign in, Account → Delete account raises the same request without any email. It takes two taps — the first opens a confirmation telling you what will and will not happen, the second files the request — and then shows you a receipt. It is the faster route, because your signed-in session already proves the account is yours, so there is no address for us to verify and no confirmation mail to answer.
It asks; it does not delete. Filing the request revokes nothing, removes nothing, and does not sign you out: your account keeps working exactly as before until a person carries the erasure out, on the timeline below. Nothing on that screen will tell you your account has been deleted, because at that point it has not been.
This page stays because it is the route that needs neither the app nor a sign-in — if you have uninstalled, lost the device, or cannot get in, email is how you ask.
What is deleted
- Your Lonzo account and profile.
- Everything Lonzo derived from your mail and calendar — its cached copies of messages and events, its classifications, summaries, drafts, insights, and activity history.
- Your reminders and any assistant conversations.
- Your connected-Google authorization (revoked), and your stored access tokens.
All of the above is removed from our live systems when we carry out your request, within 30 days. Residual copies remain in our encrypted backups until those age out on our 90-day rolling purge cycle, so deletion is complete — live systems and backups — within 90 days.
Two numbers, and here is the difference. Removing your data from our live systems is something we do; after it, nothing we run is serving your data. The 90 days is a window we wait out: we keep three kinds of backup, and the longest — a nightly export of our database — is kept for 90 days and cannot be edited to reach one account. We published 30 for both until 2026-08-17, which was the shortest of the three windows stated as though it covered all of them.
We do not destroy a per-account encryption key as part of deletion, so we do not tell you your data becomes mathematically unrecoverable the moment you ask. What we commit to is what we do: removal from live systems within 30 days, and expiry from encrypted backups within 90. The reasoning is in the Data Retention & Deletion Policy.
What is not deleted, and why
- Your Gmail, Calendar, and Contacts. Those are yours and live in Google. Lonzo only ever holds a short-lived cache, so deleting your Lonzo account destroys that cache and leaves your Google data untouched.
- The request itself. Asking becomes a support case, because a person carries the deletion out and the case is how the request stays on the record until they have. It is held as readable text, not under your account key, so an account deletion does not remove it; it is deleted on its own clock instead, 30 days after we close the case. What it holds depends on how you asked. By email, it holds your address, your subject line, and our notes on handling it. From the in-app control it holds no address and no words of yours at all — your session identified you, so there is no message to keep. We would rather tell you than have you assume the deletion covers it.
- Records we are required to keep. A small set of security and billing records is retained where law requires it — authentication audit events (90 days, and in no case more than 12 months) and payment/tax records (seven years, as tax and accounting law require). These are retained, minimized, and never used to rebuild your assistant.
- A spam report or bounce against our own service mail. If an address reported
as spam, or bounced, a message we sent from one of our own
lonzo.aiaddresses, our email provider holds that address on a suppression list indefinitely — because discarding it is how the sending would silently start again. That entry is keyed to the address rather than to your account, so it is not yours to delete and it outlives the deletion.
An opt-out is the one thing people expect to find on this list and it is not here, so it is worth saying plainly why. When a recipient asks to stop hearing from you — through the unsubscribe link on a coordination message, or by replying to ask us to stop — that opt-out is recorded against your account's record of that recipient. It is part of your account data, so it goes when your account goes. What makes that safe rather than a loophole is that the account's ability to send goes with it: there is nothing left to send from, and no way to re-add the address to a list that no longer exists. It has never silenced anyone else's account either, and the Acceptable Use & Anti-Spam Policy says so — an opt-out belongs to the account that holds it.
Timeline
| Stage | When |
|---|---|
| You can cancel your request (reply, or write to privacy@lonzo.ai) | any time before we carry it out |
| Account and data removed from live systems; Google authorization revoked | on handling your request |
| Data removed from live systems | within 30 days |
| Deletion complete across our systems, including encrypted backups | within 90 days |
Full detail, including the retention table and legal-hold exceptions, is in the Data Retention & Deletion Policy.
If you only want to disconnect Google
You do not have to delete your account to cut off access to your mail and calendar. Account → Connections → Disconnect revokes the authorization and stops all reading, and keeps your account. See How do I disconnect Google?.
Lonzo home · Open Lonzo · Help · Privacy Policy · Data Retention & Deletion Policy
Vista del Lago Software LLC · privacy@lonzo.ai