Delete your account and data.

You can delete your LumaDocs account and all associated data at any time, without installing the app. This page explains exactly what exists, where it lives, and how to remove each piece.

What we actually hold

Almost nothing — and this changes what "delete my account" means. LumaDocs has no user database. We do not store your documents, your account record, or your encryption key on any server we control. Your sign-in session is a signed cookie in your own browser, and it disappears when you sign out.

Your data lives in exactly three places, all of which you control:

• This device — the encrypted vault in your browser's IndexedDB, along with the seed used to derive your master key.
• Your Google Drive — if you turned on sync, encrypted backups in a folder named LumaDocs inside your own Drive. We cannot read or delete them; our access token only ever sees files the app itself created.
• Your Google account — the permission grant that lets LumaDocs create those files.

Step 1 · Erase the vault on this device

Use the tool below. It destroys the encrypted database and, critically, the device seed. Once the seed is gone the master key cannot be re-derived, so any ciphertext that survives elsewhere is permanently unreadable — by you, by us, by anyone.

If you have documents you still need, export them first from Settings → Export Vault. There is no recovery path after this.

Step 2 · Delete the encrypted backups in your Drive

If you enabled Drive sync, open Google Drive and delete the folder named LumaDocs, then empty your Drive trash. These files are yours and sit in your own storage, so only you can remove them. They contain ciphertext only, and after step 1 nothing can decrypt them.

Step 3 · Revoke the LumaDocs permission

Open your Google account permissions, select LumaDocs, and choose Remove access. This invalidates the token the app used and severs the connection entirely.

What is retained, and for how long

• Documents, images, metadata, tags, notes: nothing retained. We never received them in readable form.
• Account record: none exists to delete. We hold no user table.
• Email correspondence: if you contact us, we keep that thread for up to 12 months so we can answer follow-ups, then delete it.
• Server logs: standard request logs from our hosting provider, which may include a truncated IP address, are retained for up to 30 days and then rotated out. They contain no document data.

Guest accounts

If you used LumaDocs without signing in, only step 1 applies. Nothing was ever transmitted anywhere, so there is no Drive folder and no permission to revoke.

Prefer us to handle it?

Email privacy@lumadocs.app from the address you signed in with and we will confirm within 30 days. Be aware that we cannot reach into your device or your Drive — we can only confirm that we hold nothing and walk you through the steps above.

See also our Privacy Policy and Terms of Service.