Back to home

Delete Your Account

Last updated: 2026-05-15

Last updated: 2026-09-17

1. Who we are

Lastribe is operated by EnableUnion SASU, a French simplified joint-stock company registered in Thionville, France. Lastribe is the trade name shown on the Apple App Store and Google Play; the mobile app's package identifier is eu.enableunion.lastribe. Full company identification, registered office, and publication details are in our Mentions légales.

This page tells you how to permanently delete your Lastribe account and what happens to your data when you do.

2. How to delete your account

Option A — In-app (recommended)

  1. Open the Lastribe mobile app and sign in.
  2. Go to the Profile tab.
  3. In the settings list, open GDPR & Privacy.
  4. Tap Delete Account.
  5. Confirm in the dialog by tapping Yes, Delete My Account.

What happens next:

  • Your account is scheduled for deletion and the app signs you out immediately.
  • A 30-day grace period lets you change your mind: signing back in within those 30 days restores the account and cancels the deletion.
  • After 30 days the deletion is final: all data listed in §3 is hard-deleted.

Option B — By email (if you cannot access the app)

If you cannot reach the in-app surface (lost device, locked out, deactivated subscription, etc.), email privacy@lastribe.eu from the address registered to your account, with the subject line:

Account deletion request — [your account email]

We respond within 30 days, as required by GDPR Article 17. You can use dsa@lastribe.eu instead if your request also concerns DSA / content moderation matters.

You do not need to give a reason. We may ask for additional information only to verify your identity and prevent unauthorized account deletion.

3. What is deleted

When the hard-delete runs (immediately on email request, or at T+30 days for in-app requests), the following data tied to your account is permanently erased from our production database:

  • Profile: name, email, date of birth, avatar, household configuration, language and accessibility preferences
  • Inventory & autonomy: all inventory items you created, autonomy snapshots, expiry tracking history
  • Academy: course progress, quiz attempts, badges, XP, level history
  • PrepScore: domain scores, score history, contribution breakdown
  • Events: event participations, submitted evidence (photos, videos, GPS coordinates), check-ins
  • Panic Mode: voice recordings, contact lists, last-known location pings
  • Tribes: your memberships (you are removed from every Tribe you joined or led), your direct messages (anonymized — see §4)
  • Notifications: push tokens, device identifiers, notification preferences
  • Location: approximate city and any precise location you opted into sharing
  • Analytics: identifiers linking analytics events to your account

We also act on the personal data held by our third-party processors, according to each processor's capabilities:

  • PostHog (analytics): we call PostHog's person-deletion API to delete the analytics person and its associated events linked to your account, and we record the outcome in our deletion audit log.
  • Sentry (crash logs): Sentry does not provide a per-user deletion API. Crash data is minimized at collection and is purged automatically by a short retention window (90 days max), after which it is no longer joinable to a deleted account.
  • Resend (transactional email) and RevenueCat (subscriptions): we do not retain marketing contact lists in these processors beyond what is required to send a given transactional email or to maintain the legally-mandated accounting records described in §4. Where subscription and payment records must be retained for accounting/tax obligations (see §4), they are kept for that purpose only and purged at the end of the legal retention period.

4. What is retained, why, and for how long

Some records are retained after account deletion where French or European law requires it, or where third-party continuity reasons override deletion. None of these retained records remain identifiable to you as a person — they are anonymized at the moment of deletion.

DataRetention periodLegal basis
Anonymized in-app messages you authoredIndefinite (no identifier)Conversation continuity for other Tribe members; your authorship is replaced with a deleted-user placeholder
Payment and subscription records (RevenueCat)10 yearsFrench Code de Commerce art. L123-22 — accounting obligation for commercial documents
Tax invoices10 yearsCode général des impôts art. 102 B — VAT records retention
DSA notice-and-action records (if any)6 months after closureDigital Services Act Article 17
Crash logs (Sentry)90 days maxAnonymized at collection; not joinable to a deleted account
Aggregate analytics (PostHog)IndefiniteAggregated and anonymized; cannot re-identify you

After 10 years, payment and tax records are also purged from our archives.

5. Confirmation

You will receive:

  • An acknowledgement email when your deletion request is registered (in-app or by email).
  • A final confirmation email when the hard-delete completes (T+30 days for in-app requests; up to 30 days for email requests).

If you do not receive these emails, check your spam folder, then contact privacy@lastribe.eu.

6. Questions

You also have the right to lodge a complaint with the French data protection authority (CNIL, www.cnil.fr) or with the supervisory authority of your EU country of residence.