Delete your MindWiki account

From the iOS app

1. Open the MindWiki iOS app.
2. Tap Settings (bottom navigation).
3. Scroll to Privacy & Data.
4. Tap Delete account.
5. Confirm the destructive action. Your account is flagged for deletion immediately.

From the macOS app

1. Open MindWiki on macOS.
2. MindWiki → Preferences → Account → Delete account.
3. Confirm.

From MindWiki Cloud (mindwiki.io)

1. Sign in at mindwiki.io/login.
2. Open Account → Danger Zone.
3. Click Delete account and confirm.

If you can't access the app

If you can't reach any of the apps (lost device, forgotten password, locked-out account), email dpo@mindwiki.io from the email address on the account. We'll verify and process within 30 days.

Before deletion, export everything. Once your account is deleted, we can't recover the vault for you.

• iOS— Settings → Privacy & Data → Export my data. Receive an archive link by email when it's ready.
• macOS— Preferences → Account → Export data. Saves a .zip to disk.
• MindWiki Cloud— Account → Data → Export vault. Emailed link when ready.

The export is a folder of plain markdown files, attachments in their original formats, and an index.json describing structure. It can be opened in any markdown editor or imported into any other knowledge tool.

• The account record (email, password hash, settings, preferences, OAuth links, sign-in-with-Apple binding).
• Every page in your vault, including all markdown bodies, frontmatter, wikilinks, and titles.
• Every attachment — images, audio, video, PDFs, documents — stored in our object storage.
• All API keys and OAuth refresh tokens issued under the account.
• All MCP scope grants made by the account.
• Your personal email capture address — incoming mail to it begins bouncing immediately.
• Saved sessions on every device. Other devices will show signed-out next time they reach the network.
• Cached chat conversations and voice transcripts (where retained — see the AI Processing Policy for what we keep vs. discard).

We delete personal data from live systems and the primary database within 30 days of a deletion request. A small set of records may be retained for narrow, legally-grounded reasons:

• Backups — encrypted point-in-time backups age out on the schedule described in the Privacy Policy (currently up to 35 days). Deleted data is overwritten in the normal rotation and is not restored from backups except in the event of a catastrophic system-wide loss, in which case tombstoned accounts are re-deleted as soon as the restore completes.
• Billing records — receipts, invoices, and transaction history retained for tax and accounting purposes for the period required by applicable law (typically up to 7 years in the United States).
• Enforcement records — for accounts terminated for cause (Acceptable Use Policy violations), we may retain a record of the account ID, violation summary, and the evidence supporting the action so we can defend against legal claims and prevent re-registration of banned actors.
• Legally-required records — where law requires us to preserve specific data (for example, CSAM reports filed with NCMEC), we retain for the period the law requires.
• Aggregated / de-identified analytics — counts, latency stats, error rates, etc., with no link back to your identity.

• Immediately — account marked as deleted; sign-in blocked; existing sessions invalidated; capture email bounces.
• Within 24 hours — vault content removed from live storage and the read-replica caches that power search.
• Within 30 days — vault attachments removed from object storage; account record tombstoned in the primary database.
• Within 35 days — vault content expires from rolling backups.
• Subprocessors — third-party processors (Cloudflare, Vercel, etc.) receive a deletion signal as part of the same flow; their independent retention schedules are summarized on the Subprocessors page.

Cancelling a paid subscription does not delete your account — it just stops billing at the end of the current period. Your vault and Free-tier access remain. To remove the account entirely, follow the steps under How to delete your account above. See Billing, Cancellation, Refunds & Restore Purchases for subscription mechanics.

Parents or legal guardians can request deletion of a minor's account by emailing dpo@mindwiki.io with proof of guardianship. We process these as highest priority; see the Minor Safety page for the full policy.

If you delete by mistake, email dpo@mindwiki.io within 7 days. We can sometimes — not always — roll back a tombstoned account from backups before the attachments age out. After 7 days the data is gone.