push.tt / Legal / Delete account

Delete your account

You can delete a push.tt account yourself, from inside the app, without asking anyone. This page says exactly what that removes, what survives, and what to do if you cannot reach the app.

From the app

Open Settings → Your account → Delete account, and confirm with your password. We ask for the password again on purpose: this is the one action nothing can undo, and a handset left unlocked for thirty seconds should not be enough to do it.

It takes effect immediately. You are signed out on every device, and every session and device key is revoked before anything else happens.

What is deleted

  • Your profile: username, display name, email address, photo and public key.
  • Your devices and their keys, and every signed-in session.
  • Messages you sent, and your direct conversations.
  • Recordings and attachments you sent. The message rows go immediately; the stored ciphertext is reclaimed by a sweep that runs every six hours, so allow a few hours for the bytes themselves.
  • Your channel memberships, activation codes and saved preferences.

What happens to channels you own

A channel you own that other people are still in is handed to another member — the longest-standing administrator, or failing that the longest-standing member — and they are given the rights to run it. It is not deleted, because it is not only yours: other people's history lives there.

A channel nobody else is in is deleted with your account.

What we keep, and why

If you have ever bought anything — account credit, a phone number, an eSIM, a licence seat — we keep the purchase record and the wallet ledger entries behind it. We are required to, and our own rule is that nothing deletes a record of money moving; a refund is a new entry, never an erased one.

In that case your account row survives as a tombstone: no name, no email address, no password and no encryption key, so nothing can be sealed to it and nobody can sign in as you. The receipt still says what was paid. It no longer says who paid it. The app tells you when this has happened rather than reporting a clean deletion it did not perform.

We also keep the administrative audit entry recording that an account was deleted, and the date. That is what lets us answer honestly if you or a regulator ask us later what became of it.

Account credit is not refunded

If you have money left in your push.tt balance, deleting your account does not pay it back — there is no automatic refund, and once the account is gone there is nobody for us to pay. Spend it or ask us about a refund first if that matters to you.

Things we cannot delete, because we never had them

Voice, video and messages on organisation and private channels are end-to-end encrypted, and your private key is generated on your device and never leaves it. We hold ciphertext we cannot open. Deleting your account removes what we store; it cannot reach a copy already decrypted on somebody else's handset, any more than deleting a sent email removes it from the recipient's mailbox.

If your organisation has retention switched on, your organisation's administrators hold an archive under their own key. That archive is theirs, not ours, and is governed by their retention policy — ask them.

If you belong to an organisation

Deleting your account removes you from your organisation and releases the seat, number and eSIM assigned to you back to them. It does not delete the organisation, its channels or anybody else's account. An administrator who wants the whole organisation removed should write to us.

If you cannot reach the app

Lost handset, uninstalled the app, or cannot sign in? Write to us from the contact page and say that you want your account deleted. We will verify that the request comes from the account holder before acting — an unverified deletion request is a way to delete somebody else's account — and then run the same operation described above.

This page describes what the software actually does. The in-app route and this page reach one endpoint, and the behaviour above is pinned by an automated test that fails if any of it changes. If something here does not match what you saw, tell us — that is a bug on our side, not a wording difference.