Security

Last updated: 11 November 2026

Every Action is on the record

Every Action Lolu takes in your connected apps, or is asked to take, is recorded: which app, what kind of Action, whether it waited for you, and how it ended, with the details of each one that ran or that Lolu refused stored encrypted. The record is kept for the life of your account, and no sweep deletes it before then.

What staff do is on the record too

Every time someone on Lolu’s staff looks at an account’s data in Lolu’s admin tools, or changes something there, it is recorded: what was looked at or changed, and when. The record cannot be edited, is kept for 400 days, and stays after an account is deleted; it names the account but holds none of its words and not its email. If the record cannot be written, the admin tools do not show what was asked for. The part of the record about your account is in your copy of your data, and from a coming app update Settings → Your data → Privacy & trust shows it too. The few people who run Lolu’s servers can also reach the servers and the database directly, to keep Lolu running; that is outside this record.

Staff see your messages only as a length

Lolu’s admin tools show what you write to your assistant only as its length and a short keyed fingerprint, and a document you add only by the length of its name. One message and its answer are opened only for a support case or for security, with a written reason that is recorded with it. A chat you deleted shows only as deleted.

Your assistant, kept apart

Each user’s assistant has its own profile: its own memory, settings and conversations. Each user with a connected app gets an assistant process of its own.

Keys that can be changed

What Lolu stores sealed is encrypted under a key that can be rotated. A keyring still opens what was sealed under the previous key while everything is sealed again under the new one, and the keyed fingerprints Lolu looks things up by keep working across the change.

A lock on the admin door

Ten wrong admin secrets from one address within 15 minutes lock that address out of the admin tools for 15 minutes, even with the right secret.

Encrypted backups that expire

Lolu’s database is backed up every night and encrypted before the copy is stored, on the server or off it. Each nightly copy is deleted by its age, within 30 days.

Connections

The app talks to Lolu’s servers only over encrypted connections (HTTPS).

Your data, your call

• Take a copy — in the next app update, Settings → Your data → Export my data; on any version, by email to support@lolu.ai.
• Delete it — a chat, an item in Memory, a connected app, or your whole account, as the Privacy Policy describes.
• Know how long Lolu keeps what — every time limit is in the table in the Privacy Policy, and tests in Lolu’s code check that the table matches it.

Found a problem?

Write to support@lolu.ai. Tell us what you found and how to see it, and we will answer.