How to delete your account
In the app (fastest)
Settings → Account → Delete account.
You will be asked to sign in again if your session is not recent, to pass your second factor if you use one, and to type a confirmation. Deletion starts immediately.
On the web, without the app
https://api.condei.app/account/delete
Enter the email address on your account. We email you a link; opening it and confirming files your deletion request, which we then carry out through the same process as an in-app deletion. Nothing is deleted just by visiting the page or by a link being opened in passing — you have to confirm.
If you signed in with Apple and hid your email address, enter the Apple private relay address (it ends in @privaterelay.appleid.com); that is the address your account holds.
If your account has no email address we can match, or you no longer have access to that mailbox, email support@condei.app and we will verify you another way.
A suspended account can still be deleted by its owner.
What deleting does
Deletion is permanent. It cannot be undone, and we cannot restore anything afterwards.
Erased immediately
In the same moment the account is marked deleted, we erase:
- every sign-in session, on every device;
- your sign-in identity — your Apple or Google identifier, your passkeys, your email address and password credentials;
- your two-factor secret and your backup codes;
- your keybag: the wrapped copies of your encryption key.
That last one matters more than the rest. Your notes were only ever readable by unwrapping that key. Destroying the keybag makes every remaining copy of your encrypted data permanently unreadable — including any copy sitting in a backup — by us and by anyone else. Deleting the data is what happens next; making it unreadable has already happened.
Because your sign-in identity is released immediately, you can create a new Condei account with the same Apple, Google or email sign-in straight away. You do not have to wait.
If you used Sign in with Apple, we also ask Apple to revoke Condei's access to your Apple account. Deletion does not wait on Apple being reachable; we retry until it is accepted.
Erased within 30 days
A scheduled job hard-deletes, within 30 days:
- all your notes, tags and folders (as encrypted data — that is all we ever had);
- all your attachments, and the files behind them;
- your devices;
- your account's own security activity.
Kept, and why
Our internal record of staff actions. If a member of staff ever acted on your account — signed a device out, changed a quota, ran the deletion — that action is recorded in an internal log that cannot be edited and is never deleted. We keep it so we can always show how an account was handled, including long after the account is gone. It refers to your account only by an internal number: it holds no email address, no note, and nothing else that identifies you once the account is deleted.
An email address for a request we are answering. If you asked us to delete via the web page or by email, we keep the address you used so that we can reply to you. It is stored separately from everything else and is deleted 30 days after your request is closed.
Not ours to delete
If you use Condei on Apple devices, your notes also sync through your own private iCloud database, which belongs to your Apple account and not to us. The Condei app deletes its own iCloud data when you delete your account, and tells you it is doing so. If you optionally turned on Google Drive backup on Android, that backup is in your own Drive app-data folder and is yours to remove.
Notes stored locally on a device are removed when you delete the app from it.
If you only want to start over
If you have lost every way to unlock your notes — no signed-in device, no recovery code, no password — you do not have to delete your account. The app can start a fresh vault: it permanently discards the old encrypted notes and gives you a new, empty set, keeping your account, your sign-in and your email address, and issuing a new recovery code.
Nothing is lost by doing this that was ever recoverable: without a key, the old data could never have been read by anybody.
Questions
Email support@condei.app. We answer deletion and other data-protection requests within one month, and will tell you within that month if a complex request needs longer.
See also the Privacy Policy and the Terms of Service.