Delete your account

Last updated: 2026

This page explains how to delete your Lupus account (app com.alpistesec.lupus, published by AlpisteSec) and what happens to your data. Deletion is permanent and cannot be undone.

From the app

1. Open Lupus and go to Settings.
2. Tap Delete account.
3. Type your account email to confirm.

From the website

1. Sign in at alpistesec.com/login.
2. Open your account page.
3. Under Delete account, type your account email and confirm.

If you cannot sign in, email support@alpistesec.com from the address on the account and we will delete it for you. We reply within 30 days.

What is deleted

Deleting your account removes the following from the active account service:

• Your account itself: email address and password.
• Your licence and entitlements, including Pro.
• Device activations tied to the account.
• Your arsenal: every uploaded module and binary, and the encryption keys for them.
• Team memberships. If you own a team, the team and its seats are removed too.
• Diagnostic events attributed to your account.
• Any message you sent us through the contact form.
• AI session grants and AI response reports you submitted.

What happens to your subscription

Cancellation requests for recurring subscriptions you own (PayPal, Whop and synced Google Play purchases) are saved before the account is removed. If a provider is unavailable, we retry after deletion until it confirms cancellation. Billing is not confirmed stopped while that request is pending. Removing a team member does not cancel the owner’s subscription.

In Google Play, check Payments and subscriptions → Subscriptions → Lupus, especially if a purchase never synced to your Lupus account. You can cancel directly there. Deletion does not refund a payment already made — see the Refund Policy.

What is kept, and for how long

Private, access-restricted disaster-recovery database backups expire after 90 days, so deleted data may remain in those backups until that schedule completes.

Payment records are kept for as long as tax and accounting law requires, but they are stripped of your email and Lupus account link: the amount, currency and payment-provider reference remain. Your payment provider may still associate that reference with you and keeps its own record of the transaction under its own policy.

A keyed digest of an address that used a trial and Play purchase/account digests remain to prevent repeat trials and purchase reassignment. They do not keep your readable email. Pending cancellation references remain until the provider confirms cancellation; then the reference is erased and completion metadata is removed after 30 days. See the Privacy Policy for retention details.

Diagnostic events recorded before you ever signed in are not linked to any account and cannot be traced back to you; they are not affected by deletion and are discarded on the ordinary retention schedule.

Data that was never ours

Scan results, credentials and chat history live on the local or remote agent you select. Account deletion does not erase that agent’s data, exported files or material sent to your AI provider. Delete local chats in the app and use the remote agent’s and provider’s deletion controls separately. Uninstalling removes private app data from the device, but not exported files, remote-agent data or provider records.