Delete your Cipherfilm account

In short: your Cipherfilm account lives on the Cipherfilm server you signed in to, not with us. You can delete it yourself in the app or in the browser, at any time. The Cipherfilm developer holds no account data and no photos, so there is nothing to delete on our side.

Where your account is

Cipherfilm is self-hosted. Every account exists only on one server, run by you or by the person who invited you (your server's administrator). We, the Cipherfilm open-source project, run no server for you and receive none of your data: no e-mail address, no photos, no videos, no usage data.

Delete it in the Android app

1. Open Cipherfilm and unlock it.
2. Tap Account.
3. Tap Delete account, read the warning, enter your password and confirm.

Delete it in the browser

1. Open your Cipherfilm server's address in a browser and sign in.
2. Open Account (your avatar, top right) → Delete account.
3. Enter your password, tick the confirmation and tap Delete account for good.

You don't need the Android app installed for this.

If you can't sign in any more

Ask your server's administrator to delete the account. They can do it in the web app under Admin, or on the server with:

docker compose exec app /app delete-user you@example.org --yes

If you don't know who runs your server, it is the person who sent you the invite link. If you run the server yourself, you are the administrator.

What is deleted

At once and for good, from that server:

• your account and the e-mail address you sign in with,
• all your photos and videos, including the trash,
• your albums, favourites, people and search data,
• your encryption keys stored on the server (all of them encrypted),
• every signed-in device: they are all signed out.

Nobody can bring the data back afterwards, not even the administrator.

What may be kept

• Server backups. If your administrator makes backups of the server, copies of your encrypted data stay in those backups until the administrator's own backup retention removes them. They are ciphertext: without your password or recovery key they cannot be opened. Ask your administrator how long backups are kept.
• The administrator's activity log on the server may keep a short entry that an account was deleted (time and e-mail address), as part of the last 500 admin events.
• Your phone. Photos on your phone are not touched. Deleting the account in the app also removes what the app keeps on that phone for the account. Uninstall the app to remove it completely.

Questions

Write to contact@cipherfilm.app. We can explain how deletion works, but we can't delete accounts on someone else's server: we have no access to it. More in the privacy policy.