Delete your T-kall account

Last updated: 23 September 2026.

You can delete your account whenever you want. Deletion is immediate and irreversible: there is no grace period, no trash bin and we cannot restore it afterwards. Here is exactly what disappears and what does not.

Option 1 — Do it yourself, in a minute

1. Open T-kall and sign in. Either the installed app or the browser works, at app.t-kall.com: you don't need to install anything.
2. Open Settings — by tapping your avatar on mobile, or from the side bar on a wide screen.
3. Go into Account.
4. Tap “Delete account…”.
5. Type your identifier when it asks for it —this is the check that it's really you— and confirm with “Delete my account permanently”.

The account is deleted at that moment and your session closes on its own. There's no need to email us or to wait for anything.

Option 2 — If you can no longer sign in to your account

If you lost your password, no longer have access to the email you registered with, or you simply prefer not to sign in again, you can request it in writing.

What gets deleted

All of this disappears in a single indivisible operation: either everything is deleted, or nothing is (it cannot end up half-done).

• The account: primary email, display name and the password hash.
• The profile data: date of birth, age and location.
• Your emails and phone numbers associated with the account, verified or not, and any verifications you had half-finished.
• Your profiles (“Personal”, “Work”…) and their settings.
• All your devices, with their public keys and their notification identifiers. From that moment on, no notification can be sent to you.
• Every message you sent, in every conversation and channel.
• Your membership in channels and teams: you leave every conversation.
• Your entire address book: the contacts you saved, their emails and phone numbers and the notes you wrote about them.
• The contact requests you sent, the ones you received and the ones addressed to your verified emails. The ones someone sent to an unverified detail of yours never got linked to your account and stay as they were: pending, with no account to reach.
• Your appointments, with their encrypted title and notes, their keys and their guest list.
• Your blocks, both the ones you set and the ones set against you.
• All your open sessions, on every device.
• Any emails or numbers you had claimed and not yet verified, even if that same address is verified by someone else. They are not stored separately: they are ordinary rows in the database and disappear with the rest.

Everything above is deleted in the same transaction, and whatever the account had linked to it (profiles, devices, address book, appointments) falls with it by the database's own rules, not by a list that someone has to remember to keep up to date.

Outside that transaction, the only thing left that holds content of yours are the attachment files you may have sent —videos and documents—. They are stored apart because they don't fit inside a message, and the server does not record whose each one is —on purpose: that list would be a map of who sends files to whom—. They delete themselves in the first daily sweep after they turn 30 days old since they were uploaded: after 31 days at the latest. The remnants without content —notes in Redis, the transparency log, backups and technical logs— are detailed below, under “What is NOT deleted”. In the meantime they are bytes encrypted with a key we never had and that travelled inside messages that no longer exist: no one can open them, and neither can we.

And on the device you delete the account from, the app wipes itself as soon as the server confirms the deletion: the encryption keys, the already-decrypted messages it was keeping, the settings and its cache. An honest limit: if you have T-kall open in another tab of the same browser, the settings and the cache are still wiped right away, but wiping the keys and the decrypted messages waits until you close that tab.

What is NOT deleted, and why

This is the part almost no one tells you. We'd rather you know it before deleting, not after.

• The files you sent (videos, documents…), for a maximum of 31 days from when you uploaded them (the sweep is daily and cuts them off at 30). They are not in the database, so they don't fall with it; they delete themselves once that deadline is reached. They are encrypted with a key we never had, so in the meantime no one can see them.
• The reports you appear in, as the reporter or as the reported party. The case is kept without your account —a gap is left where your identifier was— with the reason that was written (encrypted in the database with a key of ours), its priority, its status and its decision, so that deleting your account is not a way to escape a review. Today they have no automatic deletion deadline, and a legal obligation may require keeping them for at least a year. They contain the content of no message.
• The messages other people sent you. They are theirs, not yours: they remain in their conversation and they keep seeing them. We cannot read them (they are encrypted) and deleting them would mean deleting another person's content. The ones you wrote do disappear, from their screen too.
• What the other person already saw or copied. Your messages stop appearing to them as soon as they reopen the conversation —or their app reconnects—, because the server no longer has them; if they had it open at that very moment, they keep seeing them on screen until then. But since 28 August 2026 the app keeps on each device the messages it has already decrypted —it decrypts them the first time it shows them and reads them from there afterwards, like Signal or WhatsApp—, so the ones in that conversation, yours included, remain on their device until their app prunes them (400 days after it stored them, or 20,000 messages). They are not shown, but they are there, and we cannot touch them: it is their device. And a screenshot, a photo or a note they made on their own is beyond our reach, and always will be: no encryption fixes that.
• What your other devices had already decrypted. When you delete the account, your other devices immediately lose the ability to renew the session and their session expires within 15 minutes at the latest (sooner, as soon as the app talks to the server or reconnects); a live connection they already had open is not actively cut off, but it leaves every conversation and receives nothing. The cleanup of the local store, by contrast, is only done by the device you delete from. On the others, the messages they had already decrypted and their keys stay in the app's storage until you clear the app's data or uninstall it. If it matters to you, clear them yourself afterwards.
• The card other people kept of you, with the name and the notes they wrote: it is theirs and it stays, but with no link to your account. Your verified emails are removed from those cards. What you never got to verify —and today that includes any phone number, because we don't verify numbers yet— stays exactly as they wrote it, because for us there is no proof it was yours.
• Other people's appointment invitations sent to a detail you did not verify (today, any phone number). The ones that went to a verified email disappear entirely from that person's appointment: staying on as a guest of an account that can no longer sign in would inform worse than not being there at all.
• The organization, teams and channels you may have created. They keep existing for the rest of their members. If you were the only owner, they are left without an owner until they are reassigned.
• The main server's technical logs (IP addresses, operational traces), until they rotate. They are not archived or copied anywhere: each service keeps at most 50 MB of log —five 10 MB files— and the oldest is discarded on its own as new entries come in. How long that window covers depends on the traffic, so we cannot promise you a number of days without making it up.
• The rooms server's logs. It is the other machine that group calls, meetings and video appointments go through, and it is in the United States. Its logs may contain your account identifier, the room, your IP address and the times you joined and left. They are not part of the rotation above and today have no fixed retention period: once they do, we will say so here and in the privacy policy (section 8).
• The records of the meetings you created with “Meet now” or with a video appointment: who created it, a hash of the link (never the link itself), when it was created, when it expired and whether it was closed early. They stop working when they expire, but today they are not deleted, not even when you delete your account. They do not say who joined or what the meeting was called.
• Some internal operational notes (whether you were online, what permissions you had in each team, how many actions you took in the last minute and how many bytes of attachments you uploaded in the last day), stored only with the account's internal identifier and with automatic expiry: most within minutes; the attachment counter, within 24 hours at most. They carry neither your name nor your email.
• The key transparency log. It is append-only: it keeps your account's internal identifier, the date and the sequence number of each device list you published, and their fingerprints (hashes), without the keys or the contents of the list. Deleting an entry would break the chain that lets others check that no one slipped a fake device past them.
• The database backups, until they expire. A backup is made daily, encrypted before it touches the disk (a copy in the clear is never written, not even temporarily), and it deletes itself after 14 days. It is another of the places where your data can outlive the deletion, which is why it is said here instead of being left under “everything is deleted”.
• What Google already logged about the notifications sent to your devices. We stop sending it anything, but what came before is subject to their policies, not ours. See the privacy policy.

Before you delete, keep in mind

What about deleting only some data?

From the app you can delete individual contacts, appointments, devices, emails and numbers without deleting the whole account. For any other request about your data, email angel@engravitysigns.com — see the privacy policy.