Delete Your Account

The fastest route. Takes effect immediately, and you don't need to contact us.

• Open Cipher and sign in
• Go to Settings, then Security & Account
• Tap Delete All Data, under Danger Zone
• Confirm: this cannot be undone

That erases your encrypted entries and your account record from both your device and our servers.

If the app is no longer installed, reinstalling it and signing in is still the quickest route, because signing in is how we know the account is yours. If you can't sign in, use this form and we'll reply within 30 days.

Be aware of one limit. We hold no email address for your account and no password we could check, and a phone number only as a one-way hash, so without a sign-in we cannot confirm who controls an account. We will never delete one on a username alone, since anyone could type yours. Our reply tells you what we can do for that account, and an account nobody uses is deleted automatically after nine months (see below).

You can also email app@cipher-app.org with your username and what you want deleted.

• Every encrypted entry, across every tracker
• Your account record: identifier, authentication verifier, encryption salt, timestamps, the verification and legal-acceptance stamps, and, if your account has one, the phone-number hash or purchase claim
• Cached data on the device, if you delete from inside the app

We keep no backups of deleted data. Once it is gone, neither we nor you can restore it.

What we might keep

If you email us or use the form, we keep that correspondence for up to 24 months, the same period the Privacy Policy gives for every message we receive, then delete it. We may keep a minimal record that a deletion happened where we are legally required to demonstrate compliance.

Separately from anything you ask for: if an account is not used for nine consecutive months (none of its devices opens the app while online, syncs or signs in), it and every encrypted entry are automatically and permanently deleted from our servers. You need do nothing.

A free sign-up that never finishes its one-time verification is deleted after 24 hours.

Deletion is one of several rights you have. The Privacy Policy lists them all, and the Consumer Health Data Privacy Policy covers Washington and Nevada residents specifically.