Your account
How to delete your account
You can delete your account and what you stored in it yourself, in the app or on the website. If you cannot sign in, you can ask us to do it.
Three ways
Where to ask
Where to ask
The app, the website and our team all start the one deletion the service has. The part below says how long it waits and what stays afterwards.
The app, the website and our team all start the one deletion the service has. The part below says how long it waits and what stays afterwards.
Each of them starts the same deletion, with the same waiting period before anything is destroyed.
In the app
Open the app, go to Settings and choose Delete account. The app asks for your password to make sure it is you.
On the website
Sign in, open Settings, then Profile, and choose the Delete my account tab. Press Delete account and follow the steps.
Open your settingsBy writing to us
If you cannot sign in, or would rather we did it, write to us on our contact form with the topic Privacy request.
Write to us
What happens
What is deleted, and what we keep
What is deleted, and what we keep
The Privacy Policy lists every period we keep anything for, and why. This part repeats only its sentences about an account that is deleted.
The Privacy Policy lists every period we keep anything for, and why. This part repeats only its sentences about an account that is deleted.
Each sentence in this part is quoted from our Privacy Policy, so it says exactly what the policy says.
Deleted
- After you ask us to delete your account we hold it for 30 days so you can change your mind, and then it is destroyed permanently. Nothing is released to anybody during that period.
Kept, and for how long
- A minimal record of each release, saying what went to whom, when and on whose confirmation, is kept even after an account is closed, because it is the evidence we and your family need if anyone ever questions a release. We keep as little personal data in it as we can.
- The record that you agreed to a plan's automatic renewal is kept even after your account is deleted, because some state laws ask us to be able to show it. It keeps only the version of the words you saw, a fingerprint of them, when you agreed and the reference our payment provider gave you, never your name or address, and it is deleted three years after you agreed or one year after your account was deleted, whichever is later.
- The delivery record and the audit trail are kept for the life of the account and survive a deceased account being closed, for the reason given above.
- Backups: the database keeps automatic backups for 35 days, and an encrypted copy taken before each update is kept for 30 days. What you delete leaves the live service at once and leaves the backups as each one reaches the end of its normal cycle. We do not edit backups to remove one person's data, and we use them only to restore the service.
- Server and security log files are deleted after 30 days at most. E-mail addresses and phone numbers are masked before anything is written to them, and the files are never used to build a profile of anyone.
If you cannot sign in
Asking us to delete it
Asking us to delete it
A message on the contact form with this topic goes straight to our privacy team.
A message on the contact form with this topic goes straight to our privacy team.
Use our contact form with the topic Privacy request, or write to the address below. The lines here are quoted from our Privacy Policy too.
Privacy questions, requests and complaints all go to the same place, and a person reads them.
Export and deletion are in your settings. For anything else, write to the privacy contact below. We answer within 30 days. We will ask you to prove who you are first, because these requests are a well-known way to steal somebody's box.
- Privacy contact
- [email protected]
- Our support team
- [email protected]