Account control

Delete your ComX account

Deletion is security-sensitive. ComX never authorizes it from a username or account code alone.

Web request is not yet operational. The current backend does not expose a browser-safe, Recovery-Key-authenticated deletion request. No credential form is shown because pretending otherwise would put accounts at risk. Use the verified in-app flow for now.

Working in-app request

Open your profile

In ComX, open Profile / Settings and choose Delete account.

Review and confirm

The app explains affected data and confirms that recipients' local copies cannot be remotely erased.

24-hour cancellation window

Normal messaging, calls, uploads and account activity stop immediately. You can cancel for exactly 24 hours using a fresh Ed25519 device-signature challenge.

Deletion processing

At the server deadline, cancellation closes and active server data enters controlled deletion.

Data covered

Account profile, devices, sessions, Recovery verifier, FCM tokens, contacts, blocks, Terms records, server ciphertext, attachment records and mapped blobs are deleted. Reports created by the deleted account are removed; reports from others are minimized and pseudonymized.

What cannot be erased remotely

ComX cannot delete message or attachment copies already stored by recipients. Backups may retain deleted data for a proposed maximum of 30 days, pending legal approval and an operational deletion-ledger restore procedure.

Lost access

If you still have your Recovery Key, a future public flow can use the existing cryptographic recovery verifier without placing the key in a URL or browser storage. That flow requires a dedicated backend endpoint and restricted CORS before it can be safely enabled.

If you have neither an authenticated device nor a Recovery Key, identity proof is unresolved. A support process requires owner/legal approval of accepted evidence, access controls, audit retention and appeal handling. We will not accept username-only deletion requests.

View support status