Attachments are an essential part of an item and, therefore, kept as long as the item remains in ApprovalMax.
As users cannot delete any requests, the attachments are stored indefinitely.
Please note: this is also true for retired Organisations, i.e. all their data will be kept.
Data (including attachments) will only get disposed of when the respective ApprovalMax account gets deleted.