Delete Your Ayy Account

Last updated: 7 November 2026

This page explains how to delete your Ayy account, including if you no longer have access to the app.

Start deletion

In Ayy, open You → Profile & account → Request account deletion (the same screen is also under You → Settings & Safety → Your account). The deletion request must be authorized by the existing app-scoped device identity; Ayy does not introduce a username/password login solely for deletion.

If you cannot access the normal in-app path, email support@kalaphos.com with the subject “Ayy account deletion request” to initiate an off-app deletion request. We will explain how we can validate account ownership and process the request without asking for your private keys or requiring you to reinstall the app. Do not email private keys or other cryptographic secrets.

Signing out is not deletion: it keeps your chats on your phone and your account on Ayy’s servers.

30-day grace period

A deletion request immediately places the account into a 30-day deactivated grace period.

During grace, the account cannot:

• publish Nearby content or a nearby profile;
• create new conversations;
• participate as an Internet Relay-authorized account;
• otherwise participate socially through new Ayy activity.

Opening the app does not cancel deletion.

To cancel during the grace period, you must explicitly choose Reactivate account and authorize that action using the still-valid original device identity.

A reinstall can only reactivate during grace if the original cryptographic identity still exists on that device. Ayy does not provide cloud recovery of local Chats.

Permanent deletion after 30 days

After the grace period, deletion becomes irreversible.

Permanent deletion removes ordinary:

• server account/profile records;
• device bindings and active credentials;
• Push registrations;
• server block records owned by the account;
• local profile state;
• local private Chats/history;
• outbox/queued-message state;
• conversation security information and keys;
• local blocks/mutes;
• stored Ayy account credentials and device identity.

Permanent deletion means the deleted account cannot be recovered.

Offline devices

If the device is offline when the 30-day deadline passes, Ayy removes/revokes server authority on schedule. The app must erase remaining local state the next time it can run.

Ayy cannot truthfully guarantee remote physical erasure of bytes from an offline device that never executes again.

If an old iOS Keychain identity survives uninstall and later appears after permanent account deletion, the app must not use it to resurrect the deleted account; it is reset/replaced when the user starts again.

Limited records that may remain

Permanent deletion does not mean every operational/legal record vanishes instantly. Under our retention policy, Ayy may retain only the approved limited categories for their stated purposes:

• closed safety-case metadata: 2 years after final closure;
• submitted report evidence: until final case/appeal resolution + 12 months;
• moderation-action history: 2 years after action ends;
• appeal records: 2 years after final resolution;
• admin/security audit: 3 years;
• specifically legal-held records: only while a valid scoped hold applies;
• ordinary encrypted backups: no more than a 30-day rolling maximum;
• Relay ciphertext: may remain until its independent maximum 30-day expiry in the intended Internet Relay model;
• opaque Relay mailbox address: may remain reserved after revocation so it cannot be reassigned to someone else; it contains no message content or profile information.

Deletion does not create a routine archive of private-chat histories, profiles or Nearby location history. Any additional security/fraud-prevention record would need a separately documented purpose, minimal data and a defined retention period.

Safety cases and deletion

Deleting an account does not automatically destroy a genuinely active safety case. Ordinary account/profile data is removed at permanent deletion and the case retains only the minimum pseudonymous reference necessary for investigation and accountability under the applicable retention or legal requirements.

The same principle applies if the reported account is deleted.

Backups

Deleting live production data does not rewrite historical encrypted backup snapshots byte-for-byte. Ordinary backups rotate out within a 30-day maximum window. Restore procedures must reapply authoritative deletion/revocation state so an old snapshot cannot reactivate a deleted account.

Questions

Contact support@kalaphos.com for deletion or privacy questions.