Delete your account

1. How to delete your account

1. Open Mailcycle and sign in to the account, on the web at app.mailcycle.email or in the iOS or Android app.
2. Go to Settings → Danger zone.
3. Choose Delete account, type DELETE to confirm, and choose Delete account again.

Deletion needs proof that the app holds your recovery phrase, so a session copied from a browser is not enough. You do not need to ask us, and we cannot delay it.

2. Before you delete it

• Export anything you want to keep. Settings → Export data downloads your addresses and messages, decrypted on your device. Nothing can be exported after deletion.
• Card and Google Play subscriptions are cancelled for you. Deleting the account cancels a card subscription with Polar and a Google Play subscription at the same moment. If a Google Play cancellation fails, we finish it by hand. If a card cancellation fails, we stop it when its next charge arrives and refund that charge. If you are charged and not refunded, write to us.
• Cancel an App Store subscription first. Apple gives us no way to cancel a subscription bought in the iOS app, so deleting the account does not cancel it and Apple keeps charging for it. Cancel it first, in the app under Plans & Billing, which opens the App Store, or in your Apple Account's subscriptions.
• Ask for your balance before you delete. Money you paid into your account balance and have not spent is refunded if you ask before deleting the account: the delete screen shows how much it is and opens the request for you. Once the account is deleted, the balance goes with it and cannot be refunded, as the Refund Policy explains.
• Ask for any refund first. If you want a refund under the Refund Policy, ask before you delete the account. Afterwards there is no way to show us that the payment was yours.

3. What is deleted, and when

At once, from our live database and storage:

• the account record and its keys, and every session;
• every email address, which stops receiving mail and is retired so it is never issued to anyone again;
• every message and attachment, including sent copies. Message bodies and attachments are not backed up, so they are gone for good;
• every paired device and AI agent, which return to the pairing screen, and every pairing record;
• API keys, webhooks and their delivery log;
• any domain you brought;
• notification settings and push tokens, the activity log, in-app support requests, the record of paid feature use, administrative notes, and abuse reports about the account;
• the account balance.

Within 30 days: deleted database records are gone from our database provider's restore history. For mail they hold routing details such as arrival time, size and folder, and nothing readable from the message itself.

4. What we keep

• Payment records and the billing ledger, for as long as tax and accounting law requires, typically 6 to 7 years. They hold the plan, amounts, dates and the payment provider's reference, and no mail and no keys.
• The audit log of administrative actions, which is permanent and never edited, including entries about the account.
• A hash of each deleted address, permanently, so the address is never issued again. It cannot be read back as the address.
• Service logs sampled by our hosting provider, for its log retention period.
• Email you sent us, while the conversation is open, and deleted about 12 months after it ends.
• Any partner record against the account: which partner it came through and how, kept as our record of what we owe that partner.
• Cancellations sent from the app, kept with the payment records for as long as those are kept, because the refund they are owed outlives the account.

Polar, Apple and Google keep their own records of payments made through them, under their own policies. The full schedule is in our Privacy Policy.

5. If you have lost your recovery phrase

An account is its twelve-word recovery phrase. We hold no copy of it, and no name, email address or password, so without the phrase nobody, including us, can show that an account is yours. We will not delete an account on an unverified request.

• If the app is still signed in and unlocked on one of your devices, you can delete the account from there as in section 1, without typing the phrase.
• Otherwise the account cannot be deleted. No rule deletes an account for being unused, so the account record stays. Mail does not: each message is deleted when its address's retention window ends, at most 90 days after it was delivered. Mail held for an address paused after a missed payment waits up to 21 days before delivery, and is deleted with the address if payment never comes. A paired device you remove in the app is gone at once.
• To stop paying, cancel a card subscription in Polar's customer portal with the email address you gave Polar at checkout, or cancel an App Store or Google Play subscription in the store. A cryptocurrency payment does not renew by itself. An account balance keeps renewing the plan until it runs out.
• When a paid plan is not renewed, the account moves to the free tier, and anything beyond the free tier's limits is paused for 21 days and then deleted with its mail, as section 8 of the Terms sets out.

6. Help

Ask from Support in the app, or email support@mailcycle.email. We never need your recovery phrase and will never ask for it. Your rights over your data are set out in section 9 of our Privacy Policy.