Last Updated: May 6, 2026
This Data Retention Policy explains how long LocalLoco retains different types of personal data, when it is deleted, and how you can request early deletion. It should be read alongside our Privacy Policy.
1. Our Approach to Retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, to comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete it securely or anonymise it so it can no longer be linked to you.
2. Retention Periods by Data Type
| Data Type | Retention Period | Reason |
|---|---|---|
| Account information (name, email) | Duration of account + 30 days after deletion | Service provision |
| Location data (GPS check-ins) | 12 months | Trust scoring and fraud prevention |
| Visit and check-in records | 24 months | Analytics and dispute resolution |
| Receipt images | 6 months after verification | Fraud prevention |
| Loco points and reward history | Duration of account + 12 months | Dispute resolution |
| Vendor billing records | 7 years | Legal and tax compliance (Singapore IRAS) |
| Support and communication logs | 3 years | Service quality and dispute resolution |
| Analytics and usage data (anonymised) | Indefinite | Product improvement (no personal identifiers) |
| Security and access logs | 12 months | Security monitoring |
3. Account Deletion
When you delete your account, we begin the deletion process immediately. Within 30 days:
- Your profile, preferences, and saved items will be permanently deleted
- Your account will no longer be accessible
- Your personal identifiers will be removed from visit and check-in records
Some data may be retained beyond 30 days where required by law or for legitimate business purposes such as fraud prevention, legal compliance, or ongoing dispute resolution. In these cases, the data is isolated and not used for any other purpose.
4. Anonymisation
Where full deletion is not possible within the stated timeframes, we anonymise your data so that it can no longer be linked to you as an individual. Anonymised data may be retained indefinitely for aggregate analytics and platform improvement.
5. Data Held by Third Parties
Some of your data may be held by third-party service providers (such as Supabase for database hosting, or Stripe for billing). Deletion requests submitted to LocalLoco will be passed on to these providers where applicable. However, third parties may have their own retention obligations that we cannot override.
6. Requesting Early Deletion
You may request early deletion of your personal data at any time by:
- Using the account deletion option in your profile settings
- Emailing us at privacy@localloco.sg with the subject line: "Data Deletion Request"
We will respond to deletion requests within 10 business days and confirm when the deletion has been completed.
7. Legal Basis for Retention
Our retention practices are designed to comply with the Singapore Personal Data Protection Act (PDPA) and other applicable laws. We retain data only where we have a lawful basis to do so, including contractual necessity, legal obligation, or legitimate interest.
8. Contact Us
For questions about data retention or to submit a deletion request, contact us at privacy@localloco.sg.