LifeAnchor · Legal
Data Retention & Deletion
Effective October 13, 2026 · Version 1.2 · Operated by Ashlar Enterprises LLC
What LifeAnchor keeps, for how long, and how you can delete it or get a copy.
1.The short version
This policy explains how Ashlar Enterprises LLC (“Ashlar”, “we”, “us”) keeps and deletes information in LifeAnchor. It supplements our Privacy Policy and Consumer Health Data Privacy Policy.
2.What we keep and for how long
We do not run automatic scheduled purges today. Unless the table says otherwise, information is kept while your account is active and is deleted through the request process described below.
| Category | Examples | How long we keep it |
|---|---|---|
| Account and profile | Name, email, plan, profile details, emergency contact, identity details (such as the last 4 digits of a Social Security number) | While the account is active; deleted within 30 days of verifying a deletion request |
| Household content | Calendar, contacts, reminders, finance records, chores, homeschool, kitchen, trips, projects and other module data | While the account is active, unless you delete items sooner; deleted within 30 days of verifying a deletion request |
| Health information | Vitals, glucose, medications, conditions, nutrition, workouts, mood and journal entries, health goals, health timeline | While the account is active, unless you delete items sooner; deleted within 30 days of verifying a deletion request |
| Vault documents | Birth certificates, passports, immunisation records, court documents | Until you delete them, or within 30 days of verifying a deletion request. Deleting a document destroys its encryption key immediately |
| Connected-service data and credentials | Synced email, calendar and contacts; health device data; access tokens and app passwords | Imported data stays until deleted. Credentials are kept while the connection is active |
| AI conversation history | Saved chats with AI features | Only saved if the member opts in; kept until the member deletes it or the account is deleted |
| AI request log | A fingerprint of each AI request — not its content | Kept as a security record; it contains no conversation content |
| Health-access audit log | Records of who accessed health information and when | At least 6 years, including after account deletion, as a security record |
| Activity and usage events | One entry per member, per action, per day | Only as long as useful to understand feature use and help members; deleted with the account |
| Support and feedback records | Messages to us, feedback text and page address, account and billing administration details | While needed for support and administration, and as long as the law requires |
| Backups | Encrypted copies kept by our database provider | About 7 days today, on a rolling basis. Deleted data leaves the backups within 30 days as they expire. Backups are never restored except for disaster recovery, and if one is, we re-apply deletions |
| Children’s information | Information a parent adds about a child under 13 | See our written retention policy for children’s information in the Children’s Privacy Notice |
| Privacy request records | The date and type of each privacy request, how it was made, the outcome, and the reason for any denial | 24 months, used only to show we handled requests properly |
| Deletion record | Account identifiers and a hashed (one-way scrambled) email address showing that an account was deleted | 24 months, so a deleted account stays deleted — for example, if a backup is ever restored |
| Terms acceptance record | Account identifier, hashed email address, the version of the Terms accepted, and the date | 5 years after the account closes, to enforce our Terms of Service, including the arbitration agreement |
| Billing and tax records | Billing details only — nothing is charged during the beta | 7 years, once paid billing begins |
| Legal holds | Information covered by a legal hold or a law-enforcement preservation request | Only until the hold or request is released |
| Browser storage on your device | Sign-in cookies, calculator memory, display preferences | Controlled by you and your browser — see our Cookies & Storage Notice |
3.Deleting your account and data
There is no self-service “delete account” button yet. To delete your account and data, email [email protected] from the email address on the account. The same channel handles corrections and withdrawing consent. To get a copy of your data, use Settings → More → Your Data (see below) or email us.
- We verify it’s you. We will confirm the request comes from the account holder (or, for a member, from that member or someone with authority to act for them). We may ask for additional information to do this, and we use it only to verify the request.
- We respond within 45 days, and delete within 30 days of verifying. We respond to requests within 45 days of receiving them. If we reasonably need more time to respond, we may extend this once by up to 45 more days, and we will tell you why before the first period ends. Once we have verified a deletion request, we complete the deletion within 30 days.
- We tell you when it’s done, or explain why we could not complete part of the request. If we deny a request, you can appeal by replying to our decision email with the word “Appeal”; we respond within 45 days. Washington residents whose appeal is denied may contact the Washington Attorney General.
When we delete an account, we delete the account and the household content and health information stored for it, except:
- A record of your privacy request — the date, type, how it was made, the outcome and the reason for any denial — kept for 24 months and used only to show we handled requests properly;
- A minimal record that the account was deleted — identifiers and a hashed email address only — kept for 24 months so the account stays deleted, for example if a backup is ever restored;
- Proof that you accepted our [Terms of Service](/legal/terms) — account identifier, hashed email address, Terms version and date — kept for 5 years after the account closes, to enforce the Terms, including the arbitration agreement;
- Billing and tax records, once paid billing begins (nothing is charged during the beta) — billing details only, kept for 7 years;
- Anything under a legal hold or a law-enforcement preservation request, only until it is released;
- The health-access audit log, which we keep for at least 6 years as a security record of who accessed health information; and
- Encrypted backups. Our database backups are kept for about 7 days on a rolling basis, so deleted data leaves the backups within 30 days as they expire. We do not restore data from backups except for disaster recovery, and if we ever do, we re-apply deletions.
If you are the primary account holder and other adults in your household want to keep their own information, tell us in your request so we can discuss the options with you before anything is deleted.
4.Vault documents and crypto-shredding
Each document in the Vital Documents Vault is encrypted with its own key. When a Vault document is deleted, its key is destroyed immediately. Without the key, any remaining encrypted copy — including one in a backup — can no longer be read. This is sometimes called “crypto-shredding.”
5.Removing a household member
When the account holder or a household administrator removes a member, the member is deactivated and detached from the household. Their information is retained until the member, or the account holder, asks us to delete it.
When a member is removed, the tokens connecting their health devices (such as Oura, Dexcom or Tidepool) are wiped, so no further data is collected from those devices.
For a child, the parent or legal guardian may ask us to delete the child’s information at any time. See our Children’s Privacy Notice.
6.Deleting individual items
You don’t need to contact us to remove everyday records. In most modules, the person who created a record can delete it directly in that module — for example, a calendar event, a transaction, a health log entry or a recipe.
Deleted items are removed from the active service. Copies in encrypted backups are gone within 30 days, as the backups expire.
7.AI conversation history
AI conversations are saved only if the member opts in. Saved history is visible only to that member, and the member can delete it at any time. For security, we log a fingerprint of each AI request — never its content. Remember that the AI provider your household connected receives each request under your household’s account with them; their own retention terms apply to what they hold. See our AI Notice.
8.Disconnecting a connected service
Disconnecting a connected service — an email account, calendar, or health device — stops future syncing. Data that was already brought into LifeAnchor stays until you delete it or ask us to. To stop the provider’s access entirely, also revoke LifeAnchor’s access in your account with that provider. See Service Providers & Integrations.
9.Closing your account versus deleting your data
Stopping use of LifeAnchor, signing out, or removing an add-on does not by itself delete your information. Removing an add-on stops access to it at once, but to be sure records are deleted, delete them in the module before removing it, or ask us.
If you want your information gone, send a deletion request as described above. If you want a copy first, ask for one in the same email.
10.When a child turns 18
About 6 months before a child member turns 18, we give notice about the change. At 18, that person’s records become their own: they control their information, and they may split into their own LifeAnchor account. From then on, requests to delete or copy their information must come from them.
11.Getting a copy of your data
Download a copy yourself at any time: Settings → More → Your Data. We email you a one-time code to confirm it’s you, then you download a ZIP file containing your information as JSON and CSV files (one per kind of record), your Vault documents and other files you uploaded, a guide to what each file is, and a list of the companies that may receive your information. Identity, bank and account numbers appear as their last four digits only; your full documents are included as files. A parent or guardian can download a child’s information the same way. You can download up to three times a day.
You can also ask for a copy by emailing [email protected]; we verify the request and respond within 45 days. Many modules also let you download a PDF report of their information.
12.Changes to this policy
If we change how long we keep information, we will update this page and its effective date. For material changes, we will also give notice in the app.
13.Contact us
For deletion, copy, or correction requests, or questions about this policy:
Ashlar Enterprises LLC · 9905 S Pennsylvania Ave, Suite A, Oklahoma City, OK 73159 · (405) 957-9360 · [email protected]