GHOSTFACE

Secure Identity

Delete your account

1. Delete it in the app

1. Open GHOSTFACE and unlock it.
2. Go to Settings and scroll to Danger Zone.
3. Press and hold WIPE DEVICE until it completes.

If you set a duress PIN, entering it at the lock screen does the same wipe silently.

The app needs an internet connection at that moment to delete your data from our servers. If it is offline, your phone is still wiped, but ask us to finish the job (section 4).

2. What is deleted

On your phone: everything — your conversations, contacts, call history, keys (including your cryptocurrency wallet keys) and settings.

On our servers:

• Your alias registration, public keys, delivery ID and device sign-in token
• Your push-notification tokens
• Your published wallet address, if you published one
• Your active plan
• Messages waiting to be delivered to you, and notices addressed to you
• Invite codes you created
• Your Ghost Number leases and the SMS messages stored for them, including the phone numbers you exchanged SMS with
• Your VPN registration, if you had one

Your alias becomes free for someone else to register.

3. What is kept, and why

• Payment records — for each plan payment: the alias, plan, USDC amount and Solana transaction. Kept for seven years as financial records, then deleted. Records of payments between users are deleted 30 days after the payment. The payments themselves are permanently public on the Solana blockchain in any case.
• A free-trial marker — a note that the alias has already used its one free trial, so deleting and re-registering cannot repeat it.
• Encrypted attachments — photos, files and voice notes are stored as encrypted files named by a random ID, with no account recorded against them, so they cannot be found by account. We cannot read them: the key existed only inside your end-to-end-encrypted messages. They are deleted 30 days after upload.
• A "you have left" notice to your contacts — so the people you talked to learn the conversation has ended. It is sent end-to-end encrypted, like a message: we cannot read it or see who sent it, and it is held only until delivered, for at most 7 days. Your contact list is not sent to us.
• Request records — our own logs do not contain your alias, but our hosting provider, Railway, records each request to our servers (the address requested, the IP address and the app version) and keeps those records for 30 days.

4. Ask us instead

If you can no longer open the app — for example, you lost your phone — email support@ghostface.co.nz with the subject Account deletion and your alias. Because GHOSTFACE has no email or phone number on file, we may ask you to prove the alias is yours before we delete it, so nobody can delete someone else's account.

See the Privacy Policy for everything we hold while your account exists.