Account Deletion

Last updated: 25 September 2026

If you want to delete your SEAL account, this page tells you how, and what is deleted and what is kept. You can delete your account yourself in the app, right away. If you no longer have the app or the phone you used it on, you can request deletion by email instead, as Google Play’s account-deletion policy requires.

Subscribers: deleting your account does not cancel a SEAL Plus subscription; Apple or Google keeps billing it. Cancel it separately in your store account (App Store: Settings → your name → Subscriptions; Google Play: Play Store → Payments and subscriptions).

Before you delete: sealed receipts you share with another person are not deleted (see below). Receipts that are still pending are: a pending receipt you sent is withdrawn for both of you when your account is deleted, and a pending receipt sent to you is closed. If you want a pending receipt of yours gone even earlier, withdraw it yourself: in Archive, tap the trash icon on that receipt and choose Delete completely.

Delete in the app

1. On the Home screen, tap the gear icon at the top right to open Settings.
2. Scroll to the bottom and tap Delete My Account.
3. Confirm twice: Continue, then Yes, Delete My Account.

Your account is deleted immediately and the app restarts. This cannot be undone.

Request deletion by email

If you no longer have the app or the phone you used it on, send your request to:

support@getseal.app

Subject line: Account Deletion Request

Include the following in the body:

• The phone number you registered with (E.164 format, e.g. +905XXXXXXXXX)
• A short note such as “Please delete my account and all associated data”

How long does it take?

• In the app: immediately.
• By email: we process requests within 30 days at most (typically 1-7 days). You’ll receive a confirmation reply on the same email thread when the deletion completes.

What data is deleted?

The following data is permanently deleted:

• Your phone verification records (phone number and verification history)
• Your device signing keys registered with our server (Ed25519 public keys)
• Push notification tokens
• Open pairing sessions
• Saved drafts (unsent receipt forms)
• Temporary PDF download links
• Receipts you sent that were still pending (not yet approved by the other person): withdrawn for both parties, their verification links stop working. Pending receipts sent to you are closed as rejected, so the sender is not left waiting on a deleted account.
• The display name on your account record (the name already written on receipts stays; see below)

What data is kept?

The following data is kept after deletion, for the reasons given:

• Sealed receipts shared with another person: a concluded agreement is a record shared by two people, so it is not deleted. It is removed from your own lists, but stays in the other person’s archive and on its public verification page, with the name recorded on the receipt. (Rejected receipts are kept the same way.) You cannot unilaterally withdraw from a sealed agreement; to void one, coordinate with the other person or, where necessary, pursue legal remedies.
• Audit-chain entries: every signed action stays unchanged in the append-only audit chain: the action type and time, your internal account ID and device ID, the device-key fingerprint, the signature, the signed message (for an edit, or a rejection with a reason, this includes that text) and the masked phone number recorded at the time (e.g. +90•••4567). Changing or removing an entry would break the chain for every later entry, so these entries have no automatic expiry.
• Account record: a pseudonymous record of your account is kept — your internal account ID, its creation date, a “deleted” flag and the deletion date, the hash of your device’s operating-system identifier, and your subscription status with the store’s transaction identifier(s) and when that status last changed — so that existing receipts still point to a stable ID. Your display name is removed from it.
• Anti-abuse hashes: a one-way, peppered SHA-256 hash of your phone number and of your device’s operating-system identifier, kept so that deleting and re-creating an account cannot be used to reset trial eligibility.
• Pairing statistics: a record that a pairing was started or joined, and when, with the internal account ID (no phone number or name).
• Logs and error reports: server log lines (kept up to 30 days) and crash or error reports already sent to Sentry can contain your display name, phone number or internal account ID; account deletion does not erase them, and they expire under those retention periods. Copies held by our processors (for example Twilio’s record of the WhatsApp codes sent to your number, and RevenueCat’s subscription record) are kept under their own retention periods.

After deletion

• Deleted data cannot be restored.
• You can re-register with the same phone number — this creates a new, empty account; your old receipts and drafts are not brought back to it.
• Sealed receipts you shared remain in the other people’s records; pending ones are withdrawn or closed.
• Deleting your account does not cancel a SEAL Plus subscription. Cancel it in your App Store or Google Play subscription settings, or billing will continue.

Contact

• Customer support: support@getseal.app
• Corporate / legal: tech@arkon.cc

Data Controller: Arkon Technology Kızılırmak Mah. Ufuk Üniversitesi Cd. Next Level Loft Ofis, No: 4 Floor: 27 No: 72/76, Söğütözü, Çankaya/Ankara, Türkiye