Delete your TZX Locate account

To make sure it is really you, the app confirms the request with the private key that only your phone holds. Nobody else can delete your account, not even a member of your circle, and we cannot be asked to do it with an account number alone.

When you delete your account, our server deletes, immediately and permanently:

• your sign-in key and every session, on every phone you were signed in on, and your registered phones and their notification tokens;
• your membership of every circle and trip, past and present;
• every encrypted message your phone sent through us that we were still holding (locations, places, check-ins, SOS, voice clips), your latest encrypted position, and your circle-places lists;
• your safety timers, second-contact alerts, guest links, the record of when you looked at your circles, and your join requests waiting for approval;
• every bug, crash or battery report you sent, and your Founders membership (a code you used stays used, but no longer points to you);
• and invite links you created stop working.

The other members of your circles are told that you have left. If you were the only guide of a circle, the person who has been in it longest becomes its guide. If you were the only person in a circle, the circle is deleted too (or, where people who left it earlier still need to see that it has ended, everything in it is deleted except an empty record that it existed).

One deletion record

A record that an account with a random number (not linked to your name, your phone or your key) was deleted, and when. We keep it only so that number is never given to somebody else.

Backups: within 15 days

We take an encrypted backup of the server every night and keep each one for 14 days. A backup made before you deleted your account still contains it until that backup is deleted, so the last copy of your data is gone no later than 15 days after you delete. Backups are used only to restore the service after a failure; if we ever had to restore one, accounts deleted since it was made would be deleted again.

Access logs: up to 7 days

The address a request came from and which part of the service it reached, kept for security and abuse handling, then deleted.

The relay’s service log

It records events with your random account number (for example that a circle was created or a message relayed, never its content). Those entries are not removed when you delete your account, and we have not set a fixed time limit for them yet; we will state it in the privacy policy once it is set.

Your location and messages were encrypted on your phone before they reached us, and the members of your circle decrypted them on their phones. Anything already on their phones (for example the last place they saw you) is on their phones, not on our server. The app removes you from their circle when you delete your account.

A Timeline you shared stays on their phones for the period you chose (7, 30 or 90 days). To have their phones delete it before you delete your account, turn off sharing your Timeline first: their phones delete what they hold of it when they receive that.

After the server confirms the deletion, the app erases your identity key, recovery code, history, Timeline, routine, places, voice clips and settings from your phone, and goes back to the first screen.

If you only want to clear what one phone holds, without deleting your account, the app’s data settings have an option to erase everything on it.

Email hello@tzxlocate.com with the subject “Delete my TZX Locate account”, from the email address you used to join the beta if you can.

Our server holds no name, email address or phone number for any account, so an email alone cannot point us to yours. Tell us what you can: the circle you are in and the name you use there, whether your phone is an iPhone or an Android, and roughly when you last used the app. We will reply and help:

• If you still have the phone, deleting in the app is the only way that proves the account is yours, and we will walk you through it.
• If you have lost the phone, ask your circle’s organiser to remove you from the circle; we will then work with you and the organiser to find the account and delete it from our server.

Even if nothing else is done, our server deletes your encrypted messages within 24 hours, and your last position at most 30 days after your phone last sent one (a little longer only if a safety timer of yours was running).

hello@tzxlocate.com