Delete your Kontaks data
Kontaks, by Korrelated, LLC, has no user account — no username, no password, no email address, no phone number. Deleting everything we hold is therefore one action inside the app, and it takes effect across every device on your keyring at once.
Delete everything, from the app
- Open Kontaks on any device on your keyring Any phone or tablet will do. It does not have to be the device you set up first.
- Go to Settings → Data → Delete everything You will be asked to confirm twice, and told exactly what cannot be undone.
- Walk your groups if you are asked to If you own a closed group, you are offered a choice first: hand it over to someone else, or end it. Leaving cannot silently orphan a room you are the reason for. Open groups you own pass to someone else automatically.
- Confirm Everything below is removed immediately. There is no undo, no grace period and no way for us to restore it.
What that removes
- Every device on your keyring, from our servers.
- Every route and authorized-sender record — every way anyone had to reach you.
- Every message and media object still waiting to be delivered, to you or from you.
- Every invite you had outstanding.
- Your encrypted roster backup on our servers, if you had one there.
- Your Support Reference.
- The local Kontaks data on every one of your devices we can reach.
- The encrypted backup in your own iCloud container or Google Drive app folder. That copy is yours rather than ours, and the app holds the permission to remove it — leaving a decryptable backup behind would make “delete everything” a false claim.
Three things it does not do
It does not cancel your subscription
Subscriptions are handled entirely by Apple and Google. Cancel yours in the App Store or Google Play, or you will keep being charged after your data is gone. We cannot cancel it or refund it for you.
It cannot wipe a device you no longer hold
A phone you lost or gave away has its server records removed and is revoked, so it can no longer reach anything or be reached. What is already on its disk is beyond us. That is the same limit as revoking a device, and we would rather state it than imply it away.
It does not announce anything
People you had contacts with are told nothing. Their messages simply fail, exactly as they would if you had deleted them individually. Leaving the service should not be socially louder than dropping one person.
If you have already uninstalled Kontaks
If you still have a backup — in iCloud, in Google Drive, or through your recovery phrase — install Kontaks again on a phone, restore, and use “delete everything.” That is the complete removal described above.
If you have no backup and no device, there is nothing left to delete, and nothing that can identify you. That is not a brush-off; it is what the design produces, and it is worth setting out exactly:
| What is still on our servers | What happens with no action from you |
|---|---|
| Any messages or media that never got delivered to you | Deleted within 7 days, automatically, whether delivered or not. We cannot read them at any point. |
| Your device records and push tokens | Inert. A push token for an uninstalled app stops working, and the records name nobody — there is no name, email address or phone number attached to them. |
| Route records | Opaque identifiers and public keys. Without a device holding the private keys, nothing can be sent or received over them, by anyone. |
| An encrypted roster backup, if you kept one with us under a recovery phrase | Deleted after 90 days with no check-in. We do not hold the key, so it is ciphertext to us for its whole life. |
| Load-balancer request logs | Deleted after 30 days. |
Why this page has no sign-in and no form
Most deletion pages ask you to sign in with Apple or Google, or to type an email address. Neither is possible here, and the reason is the same reason the product is worth using.
Our servers never take part in your Apple or Google sign-in. When you back up to iCloud or to Google Drive, that conversation happens between your own device and Apple or Google. We never receive a token, an account identifier, or an email address, and we store none of them. So there is no credential you could present to this page that our servers could match to anything.
We could make that untrue by starting to store your Apple or Google identifier, purely so that this page could work. We are not going to. A deletion form is a poor trade for the thing that makes a subpoena to us come back with an opaque route identifier instead of a name.
We have also deliberately not built a form that accepts an email address, a Support Reference or a route identifier and deletes the matching records. Deletion here is a cascade with no undo, and a page that destroys whatever someone types into it is an unauthenticated destructive action — anyone could aim it at a stranger. Your Support Reference in particular grants no access by design, and wiring it to a purge would quietly make that false.
Still stuck?
Write to privacy@kontaks.io and describe the situation. We will tell you honestly what, if anything, we hold that relates to you and when it expires. What we will not do is delete something on the say-so of an email address, because we could not tell whether it was yours. See support for what support can and cannot do.
The full inventory of what our servers hold, with retention periods, is in the privacy policy.